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SECURE IDENTIFICATION: THE REAL ID 
ACT’S MINIMUM STANDARDS FOR DRIVER’S 
LICENSES AND IDENTIFICATION CARDS 


WEDNESDAY, MARCH 21, 2012 

House of Representatives, 

Subcommittee on Crime, Terrorism, 

AND Homeland Security, 
Committee on the Judiciary, 

Washington, DC. 

The Subcommittee met, pursuant to call, at 9:59 a.m., in room 
2141, Rayburn Office Building, the Honorable F. James Sensen- 
brenner, Jr. (Chairman of the Subcommittee) presiding. 

Present: Representatives Sensenbrenner, Smith, Scott, Conyers, 
Chu, Deutch, Jackson Lee, and Fobs. 

Staff present: (Majority) Caroline Lynch, Subcommittee Chief 
Counsel; Andrea Loving, Counsel; Arthur Radford Baker, Counsel; 
Lindsay Hamilton, Clerk; (Majority) Bobby Vassar, Subcommittee 
Chief (Counsel; Joe Graupensberger, Counsel; and Veronica Eligan, 
Professional Staff Member. 

Mr. Sensenbrenner. The Subcommittee will come to order. To- 
day’s hearing examines whether the Department of Homeland Se- 
curity is taking its responsibilities seriously to help ensure that all 
states and territories have the resources and guidance they need 
in order to comply with the secure identity document standards put 
in place by the REAL ID Act of 2005. 

I authored REAL ID based on the necessity to help ensure the 
security of driver’s licenses and other state-issued identification 
cards. Just as the September 11th hijackers exploited loopholes in 
our U.S. immigration system, they also exploited loopholes in state 
driver’s license systems. The terrorists moved freely throughout our 
country prior to September 11th. They took flying lessons, pur- 
chased airline tickets, rented cars, airplanes and condos. They were 
able to do these things because, as the 9/11 Commission found, the 
19 hijackers had at least 30 pieces of identification, most fraudu- 
lently obtained. They ultimately used these identification docu- 
ments to board the airplanes with which they murdered over 3,000 
innocent people. 

The September 11th attacks forced us to acknowledge the weak- 
nesses in the driver’s licenses and identification document issuance 
process. At that time, most states did not even verify the true iden- 
tity of the person before issuing the most universally accepted form 
of identification in the United States, the driver’s license. The 9/11 
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Commission recognized the importance of secure identification to 
prevent terrorist activity. They stated that, quote, “Members of al 
Qaeda clearly valued freedom of movement as critical to their abil- 
ity to plan and carry out the attacks prior to September 11th,” un- 
quote. In addition, the Commission noted that if terrorist travel op- 
tions are reduced, they may be forced to rely on means of inter- 
action which can be more easily monitored and resort to travel doc- 
uments that are more easily detectable. 

The REAL ID Act established minimum standards for state- 
issued driver’s licenses and identity documents that are used for 
Federal purposes, such as to enter a Federal building or a nuclear 
power plant or to board an airplane. States are free to issue and 
accept non-REAL ID-compliant IDs so long as they are clearly 
marked “not for identification purposes.” 

Despite the REAL ID Act’s enactment, DHS is hindering imple- 
mentation by the states. Specifically, I am concerned about the 
clear lack of commitment by the Department to enforcing the 
REAL ID standards. Every effort has been made by the Secretary 
of Homeland Security to create confusion as to whether the law 
will remain in place. 

Secretary Napolitano boldly stated her intent first to repeal 
REAL ID and then to repeal and replace REAL ID, and she seems 
now to simply ignore it. DHS has not allocated adequate resources 
to fully implement REAL ID. The Office of State-Issued Identifica- 
tion Support is within the Office of Policy, which makes little 
sense, and it doesn’t have enough staff to adequately verify compli- 
ance packages submitted by the states or to provide adequate guid- 
ance to the states regarding compliance. And even more telling is 
the lack of commitment of the fact that the fiscal year 2012 DHS 
did not even bother to publish grant guidance or to allocate money 
for REAL ID grants. 

Additionally, I am concerned that DHS has not yet coordinated 
with the Federal Protective Service, Transportation Security Ad- 
ministration, or any other relevant Federal agency regarding en- 
forcement of the upcoming January 2013 state implementation 
deadline. It seems that the DHS has not taken any steps to pre- 
pare for the deadline or to alert the traveling public regarding the 
coming deadline. 

Despite a lack of guidance and communication from DHS, many 
states are moving forward with identification security reforms 
based upon guidance provided by the prior Administration. In fact, 
according to DHS, six states have submitted full compliance certifi- 
cation packages, 22 other states are materially compliant and are 
issuing compliant documents or are committed to compliance, 12 
states or territories are committed to meeting 15 of the 18 REAL 
ID benchmarks, and 4 additional states have enhanced driver’s li- 
cense programs comparable to REAL ID guidelines. 

States need to understand that the January 2013 deadline will, 
in fact, be the final deadline. They need to understand that secure 
identification is a DHS priority, and they need to know that DHS 
is serious about helping them get to full implementation. I cer- 
tainly hope that DHS will not abrogate one of its responsibilities 
to the American people by once again extending the deadline. 
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It is now my pleasure to recognize for his opening statement the 
Ranking Member of the Subcommittee, the gentleman from Vir- 
ginia, Mr. Scott. 

Mr. Scott. Thank you, Mr. Chairman. I thank you for convening 
today’s hearing. 

While it is a good idea to improve the security of state-issued IDs 
and driver’s licenses, I have some concerns about the implementa- 
tion of the REAL ID Act. If we make it more difficult for terrorists 
to get IDs, we also make it more difficult for everybody else. And 
if the process doesn’t actually prevent terrorists from getting an ID, 
all we have left is the expense and inconvenience for law-abiding 
citizens. 

The REAL ID Act requires tighter standards for driver’s licenses 
and identification cards. It was enacted in response to the 9/11 
Commission’s recommendation to implement a more secure form of 
identification for boarding aircraft and accessing vulnerable facili- 
ties. These are seemingly prudent and necessary requirements. 

The Act, however, has been subject to significant resistance from 
the states. Prior to the passage of REAL ID, and almost imme- 
diately after 9/11, many states were already taking action to tight- 
en driver’s licensing standards. Intelligence Reform and Terrorism 
Prevention Act of 2004 provided for a collaborative rule-making 
process that included states to achieve these goals. The REAL ID 
Act interrupted and replaced that process with a more rigid system 
of requirements that raise a number of budgetary and privacy con- 
cerns. 

Many elected officials in state governments across the country 
simply oppose the REAL ID Act on principle. They see it as an un- 
funded mandate. The REAL ID Act has significant expense. The 
Department of Homeland Security initially estimated that it would 
cost over $23 billion for states to implement. The most recent esti- 
mate is around $10 billion. But, of course. Congress has appro- 
priated only a fraction of that to defray the costs. 

Today, 7 years after the legislation’s enactment, 25 states, either 
through statute or legislative resolution, have rejected the REAL 
ID Act or said they would simply not comply with it. Especially 
now, since states face unprecedented budgetary constraints, it is 
essential that we find cost-effective ways to meet the objectives of 
the REAL ID Act. 

At the same time, privacy and civil rights organizations from 
across the political spectrum have also objected to the REAL ID. 
They see the legislation as a de facto national ID card, one that 
will be used not just for boarding an airplane but ultimately will 
be required for many other types of transactions, raising significant 
privacy concerns. 

Critics point out that the REAL ID would require a national con- 
solidated driver’s license database accessible to thousands of DMV 
officials across the country. If hacked or otherwise compromised, 
millions of Americans could be at risk of identity theft. 

I am also concerned that the full implementation of the Act 
would make it more difficult for citizens to vote. According to DHS, 
final regulations complying with the REAL ID is expected to create 
a significant expense to citizens as they acquire and pay for nec- 
essary documents and wait in long lines at the DMV. In fact, DHS 
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estimates that Americans will spend hours complying with the Act. 
All of this is in addition to the direct cost of almost $4 billion im- 
posed on the states, a cost that will be passed on directly to drivers 
in the form of higher fees. 

This money and administrative burden will effectively stand in 
the way of those trying to vote in states requiring the furnishing 
of ID by voters, and the burden will fall most heavily on low-in- 
come workers without paid vacation or disposable income to spend 
on new fees. 

While we all agree that security and validity of the identification 
requirements are important issues, there are real problems with 
implementing REAL ID, and so I look forward to today’s hearing 
to see what the witnesses have to say and how we can comply. 

Thank you, Mr. Chairman. I yield back. 

Mr. Sensenbrenner. The Chair recognizes the Chairman of the 
full committee, the gentleman from Texas, Mr. Smith. 

Mr. Smith. Thank you, Mr. Chairman. 

Last September marked the 10th anniversary of the 9/11 attacks. 
Unfortunately, a key recommendation of the 9/11 Commission, 
which called for secure forms of identification, is still not com- 
pletely addressed, and it seems that this Administration has very 
little interest in addressing it. 

On September 11, 2001, Americans were attacked by foreign na- 
tionals who exploited our laws and lived unnoticed in the United 
States. Nineteen of the hijackers fraudulently obtained 17 driver’s 
licenses from Arizona, California and Florida, and 13 state-issued 
IDs from Florida, Virginia and Maryland. 

During the planning stages of the attacks, these identification 
documents were used to rent vehicles, evade law enforcement offi- 
cials, and enroll in flight school. Ultimately, the hijackers showed 
these licenses and identification cards in order to board the air- 
planes they used to murder over 3,000 innocent Americans. 

Because of these loopholes in our laws, the 9/11 Commission rec- 
ommended that the, quote, “Federal Government should set stand- 
ards for the issuance of birth certificates and sources of identifica- 
tion such as driver’s licenses,” end quote. The Commission went on 
to state, “Fraud in identification documents is no longer just a 
problem of theft. At many entry points to vulnerable facilities, in- 
cluding gates for boarding aircraft, sources of identification are the 
last opportunity to ensure that people are who they say they are 
and to check whether they are terrorists.” 

The Commission was correct, and in 2005 Congress passed and 
the President signed the REAL ID Act into law. This law addresses 
this security gap and requires states to meet certain security 
standards for issuance of driver’s licenses and identification cards. 
Despite that action nearly 7 years ago, REAL ID has not yet been 
fully implemented. 

The current Administration has actually undermined the REAL 
ID Act whenever possible. They extended the compliance deadline 
two times, most recently in March of last year. Now states do not 
have to comply with REAL ID until January 15th, 2013, which is 
11-and-a-half years after the 9/11 attacks. And Secretary 
Napolitano has consistently supported the repeal of REAL ID in- 
stead of compliance with the law. 
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Many states understand that they need to issue secure forms of 
identification. They do not want to issue a driver’s license to the 
next terrorist. Unfortunately, the Department of Homeland Secu- 
rity does not seem to have the resources in place to help ensure 
that states get the guidance they need in order to comply with 
REAL ID. 

The risk of not implementing REAL ID is great. That is apparent 
in the facts that surround the February 2011 arrest of Khalid Ali- 
M Aldawsari in Texas on a Federal charge of attempted use of a 
weapon of mass destruction. According to the arrest affidavit, when 
the FBI searched his residence, they found his journal in which he 
wrote of the need to obtain a forged U.S. birth certificate, multiple 
driver’s licenses, and a U.S. passport. He planned to use those driv- 
er’s licenses to rent several cars, each with a different license, spe- 
cifically to avoid detection. 

This is evidence that terrorists still plan to exploit the weak- 
nesses in our driver’s license issuance processes in order to attack 
us. If we don’t do everything in our power to fully implement REAL 
ID, we set ourselves up for another attack. History can only repeat 
itself if we let it. 

Thank you, Mr. Chairman. I yield back. 

Mr. Sensenbrenner. Thank you very much. 

The Chair recognizes the junior Chairman emeritus, the gen- 
tleman from Michigan, Mr. Conyers. 

Mr. Conyers. Thank you. Chairman Sensenbrenner. I am de- 
lighted to be here in my relegated capacity to be permitted to make 
an opening comment. 

I notice the impatient tone in the Chairman’s voice about the 
delays that have occurred in terms of the REAL ID Act. But I 
would like to put forward a bipartisan recognition of some concerns 
that we have, and they start off with the governor of North Caro- 
lina, the former governor of South Carolina, Governor Mark San- 
ford, who called the REAL ID Act, quote, “the worst piece of legis- 
lation I have seen during the 15 years I’ve been engaged in the po- 
litical process,” end quotation. 

And then I call to my colleagues’ attention the other 28 organiza- 
tions and individuals, prominent individuals, including Bob Barr, a 
former Member of this Committee and chairman of Liberty Guard, 
who have said that this legislation would harm individual liberty 
and waste precious taxpayer resources. 

Now, that doesn’t mean that they are all right and the Chairman 
is all incorrect. I think, though, we have to take the 28 organiza- 
tions, the American Civil Liberties Union, the American Library 
Association, the Asian Law Caucus, the Consumer Federation of 
America, Consumer Watchdog — I will put all these in — the His- 
panic Leadership Conference, and 

Mr. Sensenbrenner. Without objection. 

[The information referred to follows:] 
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RE: Coalition Opposes Any Efforts to Force Compliance with Real ID 
Dear Representatives 

We the undersigned organizations write today to express our opposition to any effort by 
Congress or the Department of Homeland Security (DHS) to force states to comply with the Real 
ID Act of 2005. Real TD was passed as a rider to a bill funding military expenditures and 
tsunami relief. It gave states three years to comply with restrictive federal licensing standards, 
create a national database of drivers’ license information and build huge databases of individual 
birth certificates and other personal information. All of this would have cost billions - a cost 
borne almost exclusively by the states. 

Instead of compliance, Real ID faced widespread opposition. Groups from across the 
political spectrum opposed it. Supporters of fiscal conservatism and federalism decried it as an 
unfunded mandate that trampled on the Tenth Amendment. Civil rights and civil liberties groups 
worried that the Act lacked sufficient protections and might increase racial discrimination. 
Defenders of religious freedom described its negative impact on the Amish and other religious 
denominations. Consumer groups feared it would result in an expansive and cumbersome new 
bureaucracy. Advocates against domestic violence believed it would expose personal 
information about survivors of domestic violence and sexual assault. 

In addition, many of those same groups rejected Real ID as a national ID. They believed 
it would facilitate tracking of data on individuals and bring government into the very center of 
every citizen’s life. It would be a de facto government permission slip needed by everyone in 
order to travel. As happened with Social Security cards decades ago, use of such ID cards would 
then quickly spread and be used for other purposes - from work to voting to gun ownership. 

States rejected Real ID because of its high cost - initially estimated by DHS at $23 
billion. States were concerned that the Act would force them to change their entire licensing 
issuance process to conform to a one-size-fits-all federal mandate. At the same time the states 
were also making great strides in improving drivers’ license security and were rightly concerned 
that Real ID would interfere with or overturn many of these efforts. Twenty five states, either 
through a statute or legislative resolution, rejected the Act or said they would not comply with 
Real ID.' Fifteen of those states actually passed laws prohibiting compliance with Real ID. 

As a result of this widespread opposition. Real ID has stalled. DHS cannot mandate 
compliance because implementing its sole penalty under the statute - barring the use of non- 
compliant licenses for boarding airplanes - would bring air travel to a halt. Nor has Congress 
acted to fund the legislation. It has provided only $200 million for Real ID compliance, a 
fraction of the amount needed to comply with the law. 


^ The stales are Alaska, Ari/ena, Arkansas, Colorado, Georgia, Hawaii, Idaho, Illinois, Louisiana, Maine, 
Minnesota, Missouri, Montana, Nebraska, Nevada, New Hampshire, Norlli Dakota, Oklalioma, Oregon, South 
Carolina, South Dakota, Tennessee, Utah, Virginia and Washington. 
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Given this reality, any additional Real ID compliance efforts by DHS or Congress would 
harm individual liberty and waste precious taxpayer resources. The undersigned organizations 
urge you oppose any efforts to attempt to force compliance with Real ID. 

Sincerely, 

American Civil Liberties Union 
American Library Association 

Asian Law Caucus, member of Asian American Center for Advancing Justice 

Bob Barr, Fonner Member of Congress and Chairman of Liberty Guard 

Center for Financial Privacy and Human Rights 

Constitutional Alliance 

Consumer Action 

Consumer Federation of America 

Consumer Watchdog 

Center for Democracy & Technology 

Defending Dissent Foundation 

DownsizeDC.org, Inc. 

5-1 1 Campaign 

Electronic Frontier Foundation 
Electronic Privacy Information Center 
Floridians Against REAL ID 
Hispanic Leadership Fund 

The Leadership Conference on Civil and Human Rights 

Liberty Coalition 

The Multiracial Activist 


Patient Privacy Rights 
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Privacy Activism 
Privacy Times 

Robert Ellis Smith, Publisher, PRIVACY JOURNAL 

The Rutherford Institute 

TakeBackWashington.org 

Taxpayers Protection Alliance 

World Privacy Forum 


Mr. Conyers. I thank the Chair, and let me go directly to what 
the problem is and what we can do about it. 

Number one, I am going to ask the Subcommittee Chair and the 
Ranking Member to let me join with them in an invitation to Janet 
Napolitano, our Secretary, and ask that we meet with her as rea- 
sonably soon as possible, perhaps before the recess, to see if we can 
make progress on this issue. She was before the committee, one of 
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the committees in Judiciary only recently, but this was not the sub- 
ject of the conversation. 

Mr. Sensenbrenner. If the gentleman will yield. 

Mr. Conyers. Certainly. 

Mr. Sensenbrenner. I would be happy to invite her, and I invite 
the gentleman from Michigan to help us prod her into following the 
law that was passed 

Mr. Conyers. Thank you. 

Mr. Sensenbrenner. I think a long time ago. 

Mr. Conyers. Well, we didn’t do it, so let’s do it now. But I ap- 
preciate the gentleman’s cooperation. Chairman. 

Then the last two points that I would like to make that get down 
to what I would like to hear from the witnesses about. The problem 
with the REAL ID mandate, as Mr. Scott said, it is an unfunded 
mandate, $23 billion worth of unfunded mandate, and one of the 
things, if we have such a meeting, Mr. Chairman, would be to fig- 
ure out how we can really work out the funding of this. 

The other issue is the matter of the privacy concerns. States and 
their citizens are worried about the far-reaching implications of 
having so much personal information becoming so accessible to so 
many organizations, state agencies and people. I think there may 
be ways that could come out of this important hearing to tighten 
up privacy restrictions and address these concerns in an appro- 
priate way. 

And so it is with that spirit of bipartisanship that I look forward 
to the testimony of our very welcome witnesses. I thank you, Mr. 
Chairman. 

Mr. Sensenbrenner. The gentleman’s time has expired. 

I ask unanimous consent to submit for the record materials from 
the Center for Immigration Studies, the National Association of 
Public Health Statistics and Information Systems, the Document 
Security Alliance, and the Coalition for a Secure Driver’s License. 

And without objection, the Chair will be authorized to declare re- 
cesses during votes on the House floor. 

Hearing no objection, so ordered. 

[The information referred to follows:] 
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J,tntcr Aryk/vrrr ir the Director ofN4U«tMt SecHruy MUy >tt the Center for Imtnisrntion StudieL Ihonkyon to Art- 
them Mrehou fur rnwrrcA ntpport. 
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• Seven stares have made improvements, but are not likely to meet material compliance. 

• Among ail 56 stares and tertirories: 

• A: least 43 are is.suing tamper-rasistant cards; 

• 51 are checking SSNs and die remaining five are currently getting oniine; 


• 47 ate registered with DHS to check legal presence through the SAVE database, two arc coming online, and 
seven are nor (nvo have staiiiies preventing thi.s check); 

• Near!)’ all vital record agencies have digitized their vital events records (for births and deaths) to some 
degree, while 37 .states have installed the vntal events network that enahle.s incerscatc queric.'; another 
1 1 ate in the process of installing EWE or a similar program; but only five m<nor vehicle agencies intend 
CO check vital records prior to issuing a drivers license; 

• 32 are issuing their cards from seaire or central locations and another five are now switching to centra] 
issuance; 

• 31:^ liave installed facial recognition software to help reduce fratid and support law entorcement and anorlicr 
six are implementing it now; this technology is expensive and not required by REAL TD but helps states 
achieve rlic “one driver/one license" rule of REAL ID. 

• Only chi'cc jurisdictions are not significantly improving their license issuance, and two ol those are territories. 

• Tliesc improvements and work toward compliance have occurred de.spite at least 16 state statutes impeding full 

compliance with the REAL ID Act. 

To be clear, this report is not meant as a substitute for a Department of Homeland Security (DHS) REAL ID 
Program Office audit. In the autumn of 2008, the DHS Screening Coordination Office produced an extensive 60- 
page “Concept of Operations" for the REAL ID Program Office “designed to inform DHS senior and executive 
dcci.sion-makers responsible for DHS investment decisions ... and the intormacion to decide how the agency’ will 
comply with the statutory mandates of the REAL ID Act.’’ Within the document was a 20-pagc plan outlining how 
the office would conduct “State Compliance and Conformity Assessments” to help as.sure chat minimum drivers 
license issuance standards would be me; in an equal and feir manner fot the “240 million holders of state driver's 
licenses and identification cards ... and 675 million U.S. commercial airline travelers” and “56 jurLsdictions ,,, and 
2,500 DMV offices and facilities employing about 30,000 employees and contcacrors.” The report was ignored. 

Ttie st.ues contacted for this repon said they no longer have any guidance or support from DHS in implementing 
REAL TD. Whle .five .states .submitted REALTD compliance packages last year, none of them has been reported out 
on nt deemed compliant by DHS. As a result, no other state that I am aware of has submitted compliance materials 
sin ce. 


De.spite the lack of leadership or support by DHS, states have found their wa?,’ to implement RE.AL ID .standards 
using some federal fund.s. but primarily their own budget resources; this is due to the tremendous efficiencies, 
customer service iinprovcmcnts, anti-fraud, and law enforcement-supportive resulus that REAL ID minimum 
standards have crcaied. Status have done this despite a national anti-REAL ID campaign by the ACLl.' and the 
Cato Institute, despite DHS Secretary' Janet Napolitano’s failed attempt to repeal REAL ID, and de,spitc icgislation 
in 16 stares that hinders full REAI. ID compliance. "The states with anfi-REAL ID legislarlon either have in some 
cases barely’ improved their iicen.se Ls.suance, .such as Louisiana, or done so significantly' by simply’ seating tlicir 
improvcm.eiirs meet .AyvfVA standards (which arc mote stringent in many cases), not REAL ID standards. States 
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like Hawaii and Maryland only truly embraced REAL ID relatively recently and arc rushing to improve issuance 
Linder REAL ID guidelines, while states like Alaska are moving slowiv, but still tnoving toward more secure standards 
ill their unique circumstances. 

The island territories GAmerican Samoa, Guam. Northern Mariana Islands, Puerto Rico, and U.S. Virgisi Islands) arc 
all in difieretu positions with regard to REAL ID. While Puerto Rico and American Samoa have decided that REAL 
ID standards are worthwhile, the temaining territories arc less than enthusiastic, most of these populations airendy 
have passports to pass through securirv and to pre.sent at airline ticket counters, so from a consumer point of view, 
REAL ID is not essential. Ht'wcvcr, Puerto Rico has an infemous problem with take birth cerrilicatcs being used in 
the United States for drivers liccirses. American Samoa has a mixed native and non-American ciansient population. 
’Ih'js, Puerte Rico s and American Samoa’s reasons tor implementing REAL ID have less to do with boarding planes 
chan ’vvith assuring their licenses are not obtained fraudulently or ased for nefarious purpsoscs. 


REAL ID Implementation Chart Analysis 

Below is .an explan.arion and .analysis of the cote of this anniual report, the REAL ID Implement.a:iori Ch.att llink]. 
An explanation is provided by category. Thoroughly revamped and revetted from last year, this year's chart is updated 
to provide the most essential inform.ation in a uset-firiendly fonnat. The goal is to provide .i visual .issessmen t of how 
well the country is doing in implementing REAL ID and improving drwer’s liccn.se security across a number of key 
categories: identity vetting and. protection, tamper resistant cards, and secure cart! production. Each of these areas is 
complicated and requires a technical understanding of how' secure driver's license issuance is achieved. The chart is 
intended to stre.a.mline th.it process by providing information dearly and succinctly, supported by verified data, so 
that states. Congress, and other interested parties can find out the basics about the current status of implementation 
quiclsly and e.asily. 

The rem,iincler of this repon is an explan.ation of rhe chart, providing additional facts and anecdotes on state .activity 
in each category. The number headings in the text below refer to the numbered column in the table. All in all, for 
the second year in a rewv, it is clear that all jurisdiaions .are m.aking significant progress on improving their issuance 
processes and producing more secure credentials. What is new this year i.s how the technologies that .support secure 
credentialing have taken off'in m.iny states, despite their cost outrunning ihe likely cost of simply implementing the 
minimum .standards required by REAL ID. A.s a nation, in driver's !iecn.<c Issuance, achieving the overall goal of the 
y/1 1 Commission .tnd ILEAL ID is in sight: to make it extremely difficult for the varieties of driver’s license issuance 
fraud to permeate state motor vehicle issuance departments. By the deadline of januaiy 1 3. 2013, most statc.s will 
he substantially or materially or hilly compliant with REAL ID. No one vvould have predicted that five years ago. 


1. REAL ID Compliance by January 15, 2013 

REAL, ID Compliance. A.s of April 2011, five states submitted REAL ID full compliance packages to the 
Dep.srtment of Hoaieland Seciiritv; no new'er data is available from that source. Rcgul.mion requires that these 
compliance packages include ‘‘a certification by the highest level Executive official in the state’ responsible tor 
overseeing it.s motim vehicle department chat the state “has implemented a program for issuing driver's licenses and 
identification cards in compli.incc with the requirements of the REAL ID Act of 2(MI5, as tui thcr dciir.ed in 6 CER 
part 37, and intends to remain in compliance with these rt^ulations.” This section of the Final Rule also requires 
a certification from the .state's attorney general that the implementation ot REAL ID i.s auchori/.cd by state law; a 
detailed securin' plan ro protect data and privacy, and a description of the state’s exceprlon and waiver processes .for 
incidents v>'hcn REAL ID requirements do not apply. 
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The April 2011 compliance informarion I received from a reliable DHS source and published at that time showed 
that 4l states had embraced REAL ID tenets.’ Not privy to internal DHS documents, i have no intormation on 
whether any other states have submitted compliance packages since, although it is likely that as the January 15. 
201 3, deadline looms, some stares will choase to do .so. Nor am T in a position to determine whether state assertions 
about compliance or assertions about meeting the 39 individual REAL ID “bcnchmiarks'’ are accurate, instead, 1 
have focused on what states are saving ajid doing in regard to implementing the first 13 benchmark's because chat 
is what states arc focusing on ciirrcatly. 1 have also had to rely on states’ sclf-asscssmcnii: as to wlierhcr benchmatLs 
are met. 


To build the chart, a wide variety of sources were consulted, including but not limited to: 

• Publicly available information from DM\'^ websites; 

• American Association of Motor Vehicle Administrators {AAM\-'^A) inaccriaLs, the entity responsible for 
promulgating and. supporting statc.s in license crcdcntialii^; 

• National Association for Ptibiic Health Statistics and Informatio.n Systems (NAPHSIS) materials, emails, and 
conversations on vital record digitization implementation; 

• State sca.tuces, budget reports, technology contracts, and policy statements by ofScid-s; 

• Internal DHS reports; 

• Vendor materials publicly available; 

• News articles; 

• Phone calls to about half the DMV Directors and customer sendee lines; 

• Review of this report prior to publication by a few key stakeholders. 

''Khile the data in the chan have been checked and rcchcckcd as thoroughly as possible under the circumstances, 
there is the possibility for error. Suggestions for corrcaions from state motor vehicle departments are welcome. Please 
note chat this report is not determining, for example, whether the elements due arc required for a “tamper resistant 
ID" have been incorporated into new- card pioduaion to make it wholly compliant with RE,\L ID. instead, the 
.standard for a check mark on this chart is advertising by the .state of new' technology in the cards, vendor materials, 
contracts, budgets, and conversations with a state agency. The goal is to identily attempts and successes in making 
improvements in drivers license security and idcnticv theft protection that align with REAL ID intent, rather than 
a technical determination sif compliance. 

On the categories in the chart pertaining to determination of legal presence through the Systematic Alien Verihearion 
for Entiticmenr.s (SAVE) database and Social Security Online Verification (SSOLVO, .A.AN'TvA provides updates that 
weie cross-checked with stare '“driver’s license identification requirement' standards, as well as through p)honc calls. 
For example, many .state.s are advertising their switch to central issuance because it directly affects their customers, as 
do changes in card format. Central issuance- affects customers in that they no longer obtain their licenses as rhc)’ wait 
or the .^amc dav, hu: receive them later in the mail; .states do outreach to limit discontent among residents. Many 
states have web pages dedicated to tamper-resistant cards, central issuance, and even legal presence tequiremenrs 
and facial recognition. Information contained here on facial recognition and biometric capture was gathered using 
AAMVA data in a variety of forms, aloi^ with vendor information and phone calls. 

-k -k As of April 2011. font states (Alabama. Florida, indiaca, and Utah) were issuing ''Gold Seal" driver’s licenses 
that enable re.sidents to use that Iicen.se as identification for federal purposes to enter a .secure faciliev or commercial 
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airpoiT prior to the 2014 and 2017 deadlines for individual compliance with REAL ID. As cf January 2012. four 
iuor: states are is.suiug “Gold Star” licen.ses; Connecticut, Delaware, South Dakota, and We.st Virginia. Ohios 
“materia! compliance Gold Star” production will be switched to a REAL ID ''full complLance Gold Star" on the iull 
compliance deadline of January ! 5, 2013- 

Tliesc states are accompanying their REAL ID-compliant drivers licenses with detailed press releases that make sure 
customicrs .-enow ot the new cards' availability, what documentation is needed to acquire one. the purpose of rhe 
cards, and henv they di-ffer from a regular drivers iicen.se or ID issued by the state. Each state is providing a name for 
its RRhL iD-cf'mpIiant cani. Each state’s card will look different. Yet all of them will have a gold star printed on vht 
licen.ses to enable Transportation Security Administration (TSA) w'orkers, and other federal securicy, to easily tell a 
com.plianr card from a non-compliant card come 2014 and 2017. when deadlines for Gold Star card'carrying occur. 

Last fail: Aahama posted this explanation ofits new “STARl.D.” on its w'cbsitc: 

‘“in response to acts of terrorism comrairted against the United States, and in an effort to ensure the safer)' 
of citizens, Congress pass the REAL-ID Act of 2005. To comply with the act. the .Alabama Deparcmenc of 
Public Safety has developed a driver license and identiheation program called STAR l.D.' 

“‘Secure, Trusted. And Reiia’olc,’ STAR l.D. will be available at Driver's license examining offices in 
Montgomery, Autauga, and Chilton counties as part of a pilot project char begins Oct. 3: with a .statewide 
launch set to follow after the first of the year. 

“All current Alabama driver’s licenses and non-driver ID cards wll! be accepted for official federal purposes 
until Dec. 1 , 2014. Be^'i'^'dng on that date, however, individuals horn after Dec. 1 , 1 964, will be required 
to have a RP.AL-1D compliant doaiment to bc'ard a domestic flight or gain access to certain federal facilities 
chat require identification. On Dec. 1, 2017, individuals born on or before Dec. 1 , 1964, will be required 
to be in com-pliancc.”- 

Connccricut describes its gold star compliance as “ScicccCT ID.”-’ Its roll-out includes the following description that 
discus.ses both 9/11 and identity protection diftcrcncly from Alabama, avoiding reference to REAL ID; 

“Tile Connecticut Department of Motor Vehicles in Occolvcr w'iil start a new pn'.’gram to offer verified 
identity protection to people renewing driver’s licenses and DMV-issued identification cards. This 
verification is done now' on applicants for new liccn.se.s and ID card.s. Tlic deparcmenc will ask renewing 
customers whether they want to show original identity documents to establish a rea)rd of their identity 
with the agency' as weli as for federal identification purpases. Customers can also reject the verification and 
simply get a regular driver’s license or ID card. 

“Through the program, called SclcctCT ID, people verifying will get a gold star on the license or ID 
card. Those declining will have one scamped “Not for Federal Identification.” Tlie difference could be 
extra screening under a proposed federal program slated to go into effect in 2017 for airptuts and federal 
buildings and a!.«o use for pos.sible commercial transactions. Tne program stems from national security 
measure.s and tederai identincation standards rcsultii^ from the September 11. 2001. terrorist attacks in 
the United State.s. It Is also designed to offer residents additional protection again.se identin-' theft by having 
a hisroricai record of proven original identity documents shown to DMV.’’ 

Ohio is in rhe process of beginning production ofits “SAFE ID” and uses a “FAQ” section to describe the new card, 
referencing the requirements as .stemming from 9-'l I Commi.s.sion recommendation.s; 

“Beginning early January 2013, the BNW will issue SAFE ID driver licen.ses (DL) and identification card.s 
(ID). ’Hiis means that Oliio has met standards set forth by the U.S. Department cf Homeland Security 
.for is.suing secure identification documents... SAFE ID refers to a State of Ohio driver license (DL) or 
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identification card (ID) that is incompliance with the Federal REAL ID Act of 2005- The 9/1 1 Commission 
recommended chat the U.S. improve its system for issuing secure identification documents. Congress 
responded to this recomraendarion hy passing the REAL ID Act.”'^ 

★ As of April 2011. only seven states were meeting the 18 material compliance REAL ID bcnchmatLs. As ol January 
20] 2, 27 are meeting, or atienipiing tosuhstantialiy meet, these materia! compliance benchmarks. Tlicse compliance 
determinations are an attempt to discern upgrades to sv'seems since April 2011, when 1 received an internal DHS 
document on ';cates' self-assessments on REAL ID compliance. States embracing the standards set forth by REAL 
ILh and going bevond those reqtiiremcncs with additional security measures in processing and biometrics, and ate 
seeking to comply by the January 2013 deadline, were entered into this categon'- 

EDLs are enhanced driver's licenses that meet most of the REAL ID standards and are used by border states to enable 
their citizens to cross the border vvithout a passport. Only four states on the CanadUn border arc currenriy issuing 
EDLs, with Minne-sota .set to begin production .shortly. 

+ In April 201 1,12 states had made improvements in driver's licen.se standards, having met at least 1 5 of the 1 8 
benchmarks. As of January 2012. the number in this catcgtsry has dropped to seven, as five states have moved into 
the material compliance categort’ within the past year. 

REAL TD standards were a lower, more generalized standard than the posc-9/1 1 AAKA'A standard.s, Tlius even 
where states do nor embrace REAL ID. if they arc working on pilots and using ..A^-IMVA best practices, they could 
well now or in the future exceed REAL TD standards. That i.s the case alre.idy with 38 states conducting facial 
recognition, at least partially, in the area of identity verification. 

All these improvements are being made despite 16 states having some form oflcgisLition that prevents full compliance 
w'ith either tltc REAL TD Act of 2005 as a whole, or some portion of it, such as laws in "Washington and New 
Mexico not requiring verification of legal presence, which is key to REAL ID compliance. ’The Alaska legislature 
will not permit an appropriation to enable legal presence checks. States like Mis.souri and Montana have outright 
bans on RH.AL ID compliance, bur even these states arc improving standards. Oregon will n(.ft permit its motor 
vehicle agency to share data with other states. Other .states, like New Hampshire, cannot spend money on REAL TD 
complianee without prior approval. 

/ In April 201 1, 12 states had not pursued any real improvement in driver’s license .scanTards or issuance procedures 
related to REAL TD. Tlut number is now lower, and may only include Louisiana and two territories, Guam and 
the Marianas. Even Louisbna, however, while steadfastly uninterested in REAL ID, is interested in analyzing its 
vulnerabilities and working with AAM\’A on improvements and access to legal-status verification, as legal presence 
is important to the state. ^Alaska was potentially in this category, having met only seven benchmarks, but that’s up 
from fewer than four benchmarks last April, and it has Issued requests for concracK on centra! issuance and facial 
rccognirion. putting it at the bottom ofthc “+” category on this chan, along with the U.S. Virgin Islands. 


Key Elements to REAL ID Compliance 

The core security mi,«,sion of RE.AL ID can be summed up in three arca.s: 

• cards that arc cxtremc!v diffiaiit to tamper or counterfeit — column 2 in the tabic; 

• verifying and protecting idc.ntiry and as.<uringthat tho.se that apply are entitled to the drivcr’.s license — column.s 
3. 4. .ind 5 in me t.-.bie; and 

• secure c.ard production — columns 6 and 7 in the table 
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2. Tamper-Resistant Cards 

A lost or srokn driver’s license or ID in the past was a boon to counterfeiters and idenriry thieves because the cards 
couid be ea.'^ily modified to a new or assumed identic}' Tamper-resistant cards prevent that. Tlie REAL ID Final 
Rule' delincares the following; 

37.15 Physical security fcaturcs for the drivers license or identification card. 

(a) Cjcncral. Stares must include document security features on REAL ID driver's licenses and 
identification cards dtisigned to deter forget}' and counterfeiting, promote an adequate level of 
confidence in the authenticity of cards, and fiicUirarc detection of fraudulent c^nds in accordance 
with this section. 

(1) Ihcse features must not be capable of bci:^ reproduced using technologies 
that are comiuonly u-sed and made available to the genera! public. 

(2) Ihc proposed card solution must contain a well-designed, balanced set of 

fea:tir« that are effectively combined and provide multiple layers ofsecuric}'. Sta.tes must 
describe these document scairity features in their security plans pursuant to §37.41. 

(h) integrated security fcattircs. REAL ID drivcrls licenses and identification cards must contain at least 
th.ree levels of integrated securirv features that provide the tnaxiinum resi.scanoc to person.s’ eftbits to — 

(1) Counterfeit, alter, simulate, or reproduce a genuine document; 

(2) Alter, delete, modih', mask, or tamper with data concerning die original or lawful card 
holder; 

(3) SuKstituie or alter the original or lawful lard holder's photograph and/or 
signature by any means; and 

(4) Create a fraudulent document u.sing components foim legitimate driver's 
licenses or identification cards. 

(c) Security features to detect fclse cards. States must employ secuiity features to detect lalse 
card.s for each of the following three levels: 

(1) Level 1. Cursory examination, without tools or aids involving ciisily 
identifiable visual or tactile features, for rapid inspection at point of usage. 

(2) Level 2 . Examination by trained inspectors with simple equipment. 

(3) Lev'e! 3. Inspection b}' forensic .specialists.” 

New Jerscyls list of 25 REAL TD Card Requirements .show^ how states technically .seek to achieve tamper-rcsLstanc 
cards." 

While impossible to know whether every state has incorporated all elements of .a secure driver's iicense/ideiitificntion 
as required by the Final Rule — only aDHS audit could produce that information — it is possible to know whether 
states have made their cards more tamper-resistant. Because the new card "look’' directly affects consumers, most 
statc.s advertise their new designs in t'arying detail. A^ of January 2012, at least 43 state,s were advertising or making 
information availa'ok indicating a variety of improvements in developing camper resistant cards. Two more arc 
beginning p.'oduction soon. Tire remaining 1 1 either hav'e not or it Is unclear. 


3. Verification of Social Security Number 

The 5!) states plus the District of Columbia are actively checking SSNs, while the five territoties are working w ith 
AAM\^A on a pilot that will make SSOLV and SAW available through both .secure vveh services and a dedicated 
website that includes .an “immigration photo capability.” AArcdVAvvas alsopilotit^ Integra don of the deployment of 
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US PASS, \\ hich provides passport data for U.S. cirizens. into the DMV check, via this same web service. American 
Samoa is adding US PASS now, the first jurisdiction to do so. US PASS acts as another form of a legal presence 
check. Tnc jurisdictions committed or interested in AAMVA’s web project as of late September 2011 were: Alaska, 
American Samoa, Connecticut, Delaware, Guam, Florida, Hawraii, Indiana, Iowa, Kansas, Louisiana, Mi,ssis,sippi, 
xViissoiiri, Nebraska, New Jersey, New Mexico, North Carolina, N. Mariana Islands, Puerto ICco, Texas, U.S. Virgin 
Islands, and Virginia, 


4. Verification of Legal Presence in the United States 

Forrs'-seven jurisdictions are registered with DHS to check legal presence threuigh the database Sy.stemaric iMien 
Verihearion for Entiriements (SA\T.) .system, maintained by the federal government to dctcTnir.e legal status for a 
variety of programs. Ts’o more jtirisdicrions .are coming online, and seven are not. According ro USC1.S. as of August 
2(.'i 1 , DjVrVE collectively had conducted over 1.9 million queries of SAW in FY 2011. 

Montana is the mo.st recent .signatory with U.S. Cit!7c.n.shlp and Immigration Services (USCIS) to query .SAVE. 
In April 2011 , i\lontan,Vs legislature passed into law a bill enabling the state to query leg.si status with the leder.al 
government. That law passed by a two-to-onc mai^in in the same icgi.slaturc that four years earlier rejected 
compliance with REiAL IL') by a vote of 150-0 at a time w-hen the governc'r was one ol the most vocal critics of 
REAL ID. 

New Hampshire is .set to sign the SAVE Memorandum of Agreement (MOA). At least three of the seven areprohihited 
or prevented: Alaska, New Mexico, and Washington State- However, as New Mexiai pushes ro incorporate legal 
presence into DMV checks anyway, the state recently signed a MO.A with USCIS, the iigency that maintains SAVE, 
ro link their DMV to SAVE. 

Maine’s Cov. John Balducci issued this statement in jnne 2009 upon vetoing a bill cHit would have repealed legal 
presence requirements: 

"Forty-six states, including every state in New England, have a legal pixsencc requirement for its credentials. 
Before last year’s actions to increase ihe security of State credentials, Maine had become a target for 
unscrupulous individuals looking to circumvent legal presence lequiiements in other states. People were 
trucked in, in some cases by van load, to get driver’s licenses that would help them break the law elsewhere. 
With the protections put in place [by Maine Revised Statute Title 29-A, Section 1410,8,9] last year, such 
activities are much more difficult.”^ 


5. Verification of Birth Through the Digitized EWE Network 

Electronic Verification of Vital Events {E\^VE). The network permits queries of in-,statc and out-of-state 

vital records tot htsc-tiine app!.icanrs and others. Hie non-profit National Association trf Public He:ilrh lntonnack!n 
Systems (NAPHSTS) develops, maintains, and installs EWE in willing states with the .support of federal funding 
through the RE.AL ID Act. Some initial monies also came ixom the Kentuckj’’Traiisporcation Cabinet ch:t: piloted 
EWE. This tundiug runs out in jane 2012. As ofFcbruary 1, 2012, the vital records agencies in 37 states were 
online with rhe EVVE system, and 11 other vital records agencies are in the process of having EWE installed. The 
E\AT'. sy.stcm i.s dependent on vital cvenLs (births and deaths) being entered into the system, by state.s' vita! records 
agencies in a sr.tndard manner so queries can be made both between a states own agencies and across state lines, and 
also so the .sy.stcm can provide inform.ation to the Social Security Administration and the State Department, both o( 
wiiich are currcjit users of EVV^E for SSN and passport applicants, respectively. 


8 



18 


Center for immigration Studies 

States vary in how far back they d^itizc data, but every state has digitized a significant amount of data. (EVVE 
recomnirnds that states et'ep.ts hack to 1945.) Such data provide an opportiinicv to ensure that First- 

time applicants and first-time renewals for driver’s licenses and identification cards arc indeed who the)' say the)' 
are, preventing the most insidious type of identit)' fraud ‘R+iereby an entire idenciev' is assumed iw .someone else For 
nefarious purposes. Yet no slate motor vehicle agency is using EVVE now. The best news is that .Del aware. Indiana, 
Michigan, and Virginia {came online with E\^'’E on February 18, 2012) intend to begin incorporating E\'T^ into 
their identity verting/anti-fiaud procedures for license issuance as soon as possible. American Samoa is currently 
digitizing its records !!> accord with NAPHSIS guidelines, and will digitally check birch records at their .sole DMV 
location, hut has n<) plans now to incorporate EVVE. 

RILAL iD regulations at 6 CFR 37.13(b)(3) strongly recommend chat states cicctronicaily verif}' dates of birth 
provided by applicanw: 

‘'Sca:c.s muse verily birth certificates presented by applicants. States should use the Electronic Verification of 
Vital Events (EV'Vfi) system or other electronic s)'stcms whenever the records arc available, if the document 
does not appear authentic upon inspection or data does not match and the u.se ofexerptions proce.s.s is not 
wai'iantcd in the situation, the State mtist not issue a REAL ID driver’s iiccu.se or identification card to the 
applicant unci! the information verifies, and should refer the person to the Issuing office for resolution.”" 

EWE provides the incetstate network and standardization in a dynamic manner, meaning chat as states and 
rerrirories get online with EVVE. states within the program will be aiicomacically connected m the new states, 
provided agreement by the state holding the records. Like all other queries, the querying state would not have acce.ss 
to the actual data, only a yes/no on a match. 

Failure to link to EVVE remains the most essential missing element to REAL ID compliance, not only because the 
law strongly encourages a digital vital record check, bur also becau.se it is the only means of' ensuring that a first- 
rime applicant or firsr-time renewal is presenting a wholly legitimate identity. FacLil recognition is e.\ticmely good 
at catching fraud.sters and criminals the .second time they hit the sv'stem, hue not the first; only EWE can do char. 

Checking vital events was the key to catching an illegal alien wfio had assumed the identity of a nuirdcrcd Ohio 
hoy. Ill 2010, a Bulgarian who had managed to obtain narmalization and work as an Oregon liquor enforcement 
agent was caught by the State Department when 'he applied for a U.S. pj.ssport.'" A Davidson College drop-out, 
immigration did not catch Doitchin Krasrev, despite the feet that the stolen identity had been used since the mid- 
lOOOs. Immigration adjudicators even granted him U.S. citizenship. Tlie DMV's wficrc he was issued driver’s licenses 
did not catcli him — probably Colorado and/or Oregon. However, the State Department did because State checks 
vital records in ca.scs of,su.spected fraud in passport applicacioms. Tn [he,sesicuacion,s, EWE is supposed to be queried 
as part of Stare’s routine anti-fraud check. If Stare were nor routinely checking vita! events. Krasrev might w'eli have 
obtained a passport. Every .single driver’s license in the United States being Issued or renewed i.s subject to the .same 
possible fraud bec.Uise states are not routinely checking EVVE. 

Complicated cost estimates provided by EVVE for this project compared with research on New Jersey budget and 
licen.se i.ssuance show that in a state like New Jersey — a mid-sized state — the cost would be about £2 million per 
year to check all incoming driver’s liccnsc/idcntification card applicants name and date of birth against digitized vital 
rccoid.s chrougn EVA'T. Considering national figure.' on fraud and DfrW idencitv chef:, EW’E estimated chat this 
figure Translates into it costing the state of New Jciscy about a Si. 29 per query. That cost is higher in New Icrscy 
because the DN'lN^'s sister vital record.s agency chaises for queries from other agencies in the same state (not all .state,' 
do) an<l because no other stales arc conducting queries. The mote states connected to EVVE, the less the nonprofit 
N.APHSTS mu.st charge to maintain its system. 


Tr ail states 'vs'crc on board the cost would be reduced to $0.95 per query. Yet the major cost is not EVT’E. If all .state 
vital records offices waived their portion of the fee to state motor vehicle agencies, the cost to run EV'VE checks 



19 


Center for Immigration Studies 



10 






20 


Center for Immigration Studies 


1 next page) 

5 

e 

7 

8 




TOrU.CfwuAllaouina 




rY(w.FVM 

REAL lUCWe 


SIPfMirtc V(rt£c>d»fi 

(l»dB4ai l•K■n()l Ibr MWMO 

1 MIMMMe ocmofk lOCMUtCKt 

Cewwt «r Sacurr 

(RKiil Rece^HlM M^t 

Mvc- M-uate IkotM dtack 

«ltal nconbt * 

Immoct' 

Fbtfprpfipi)* 

«)rMcn rfmlopmail * 

✓ 

✓ 

✓ 


^ IfMlUtl 





✓ 

.♦ 

i£.|l>«^i> 

✓ 




✓ 

✓ 

✓- 


/ 

✓ 

• 


✓ 

✓ 

✓ - 

f4,4r7AiM 

✓ 


✓ 

KrWlln 

/ 1 


✓ 


✓ 




^ (pwiyi 

✓ 

✓ 

»AVi*AFT% 


• 



✓ 



>^ioe.;7a 

✓ 

✓ 




/ 

✓ 



✓ 

/* 


✓ . 

■/ 

✓ 


✓ 


✓ 


✓ 

✓ 

✓ 


/ 


✓ 


✓ 





✓ 



✓ 


• 



✓ 

✓ 


✓ 

✓ 



✓ 

/ 



/ 



iJC;iM.1)5 

✓ 


✓ 

tJ.VWtAJW 

/ 

✓ 

/ 

SI.tVta.3V) 

✓ 

/ 

/ 


/<^Ul 

✓ 

✓ 

SMVtJil 


✓ 



✓ 


✓ 

M, 4/1 JUS 



✓ 

U,w,r3f. 

✓ fNYL <nltl 

✓ 

✓ 

S7.07)Jtf!7 


✓ 

/ 

H.4173I« 

✓ 


✓ 


/ 



SljfMJTD 

✓ 



MJita.1l* 





/ 

✓ 

✓ 

Si.4/T,«m 

✓ 

✓ 

✓ 

S*I4UI<1 




«A»tal/7l> 

.y 

✓ 

✓ 

uj'ie.ro 

/ifullMll 


✓ 


✓ 


✓ 

uiuejTs 

/ ImhmI* 

✓ 

✓ 



✓ 



/ipuMdi 



s.LUiaj^ 

/ 


✓ 


/ 


• 

SI «S« J70 


V 

/ 



✓ 

/ tall tXX xalr 

li.lJtadM 

✓ 


P^' 

U7<CT^ 


✓ 

✓ 

♦ U/R-^vr. 

/ (UUUJ' 

• I 




11 






21 


Center for Immigration Studies 


Driver's License Security Implementation: Notes 


REAL ID Acl MtpV/ifi«»lfiw.p>*tV>l«)K/f4ig^RLAV*lL''^{niMLVKiinl^PLA^lV^i(>IU 

hriq Tltc rc» iir the REAL ID Plul RjiIc li4ti»<tjMeulm|> //iinitv MKk^>%/ilinli/<locVbcWACPR/ 
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wouict be reduced ro $.08 per transaction, which is doable. (A few sraccs have iav/s preventing data sharing and 
wcLi'd require legislation to permit interstate data sharing. Howet'er, these laws should not prevent in:ra,state 

sharing of vital event inlorra;ttioa, w'hich accounts for a lai^c majority of queries in states.) 

The issue is not the non-profit network provided by NAPHSIS for interstate queries, but the cost of maintaining 
up-co-ciace state and local vital record.s offices. It Is the fees chained by .state vital record, s agencies tor sharing viral 
events tecc rds that rruly needs to be addtessed. which would likely requite If^islation or regulation. While the REAL 
TD Final Rule has been amended, those amendments only pertain to deadlines for compliance; vital events would 
likely not be a prioiiry. in addirion, it is highly unlikely that any proposed REAL ID vital es'enrs regiilation would 
go so tar as :o promulgate .standards beyond the “paper” version of vital events, namely, birth and death cerciticace.s. 

Birth Certificate Standardization. Wlaile REAL ID strongly recommend.s u.sc of E\WE, it does net require its 
use to verify birth intormarion. instead, stares may rely on birth certificates. Yet the birth eerrificatc is the easiest 
of all records to counterfeit today, w'ith no standardization of issuance, nor control in most states at the state level 
on issuance; every jurisdiction produces its ow'a brand of birth ccitificrte. Tne 9/11 O.''mmission recommended 
standardization, and the RE.AL ID Act required it, but r^ulatioas drafted .seven years ago remain unpublished. 

"While these regulation, s remain in a lock box, any regulation would have to addre.ss the actual security of the paper 
birth eerrificatc as well as eliminate inconsistencies and help ensure uniformity across the birth certificate issuance 
spectrum. As i.s, it is impossible to tell a fiike ffom real birch certificate. New regulations would also have to ensure 
et.msistcnt mijiimum issuance costs for jurisdictions that may find, like motor vehicle dcp.utm.cnrs nationwide, that 
the new standards will not only add .security but ai.so create efficiencies and maintain or reduce cost over time. 


6. Secure Production and Central Issuance 


REAL ID requires either secure over-the-counter processes .and procedures for issuing and producing the cards, 
or the recommended be.st practice of “central kcianco,” whereby the applicant applies at a local DMV counter for 
the license, and it is mailed from a central facility in 15 to 30 days. REAL ID provides leeway in defining “secure 
production,” as m.any .states with ovcr-thc-countcr ksuanco were concerned about significant co.st to revamp to 
centnal issuance. ’The REAL ID regulation at 6 CFR 37.43(a) specifies that “States must ensure the physic-il security 
of facilitie.s where driver's liccnsc.s and identification cards arc produced, and the security of document materials 
and papers from which driver's licenses and identification cards ate produced or manufactured.''' ' E-ach state is to 
‘'describe the security of DMV facilities as part of their. security plan.” Centra! issuance is considered a best practice 
as it ensures only cleared personnel have access to private data and manufacturing pn^ducts for cards, and the 
facilities themselvc,s arc not susceptible to theft or fraud. 

Most .states combine centra! is.suancc with facial recognition, running facial recognition after an application has been 
submi'cied in a nnn-rushed manner against other digital photos in their system to determine tnud or other criminal 
activity. (Sec more on facial recognition heiow'.) tf there is no fraud, the secure facilir/ mails the securely produced 
card ro the applic.rnt. Otherwise it is not issued until after an investigation. 

More than 20 states employed central issuance prior to REAL ID becc>ming law. Tod.'y. 32 stares h.ave hilly 
implemented central i.ssiiancc, five are in procc.s.s, and 19 have not. As an example of co.st brcakdown.s, New Jcrecy 
signed its seven-year contr.act with the major driver’s license vendor, L-1 Identity Sohitions, for a co.mbin,ation 
over-the-counter enhanced image-capture ($5, 983,^00), facial recognition hardware and software ($4,220,000), 
centr.al issuance ($841,500), and facial recognition “scrub” of all current license holders ($185,000). for a total of 
$11,229,500. 


In mv analv.si.s last year, T concluded that REAL TD compliance per state w'ould co,st o.n av'cragc twice what the 
feder.ai government had .already allocated.'^' Under that assessment. New Jerseys REAL ID compliance costs would 
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be about $7 miijioil. substantially less than what the state has decided on its own to pay tor the immense anti- 
fraud benefits that ceehnn’agies like facial recognition, image scrubs, and enhanced photos bring to driver’s iicense 
issuance that are not requited by REAL ID, but support its intent of thorough identity vetting. 

Arkansas is one oi the few states on the list that docs over-the-counter “while you wait" issuance, but is also one of 
the few states chat does both a “photo first” check before the application is considered and one-to-one facial march 
(image run against oiher images with same identity information as applicants) before issuance. Arkansas then does 
1 ‘one-LO-many’ check (digital ima^’e run against entire database of archived digital image.s) by batch at night. TItjs, 
Arkansas is securing the issuance to the person who has been issued a prior card with the same information. Tlie 
only issue is that without conducting the one-to-many check before issuance, if that person has been issued multiple 
driver's licenses under different names, the individual already has the card in hand when the state hnris that out. and 
then mu.st embark on a diffcuh reamcation process. 

Nehriska's Department of Motor Vdticles has combined central Issuance with facial recognition. At a June 201 1 
ptescuintion, Nebraska DM V Director Beverly Ncth provided a number oflcssons learned and related the tremendou.s 
law enforcement and anti- fraud value of running digital images against an entire archive of images before care's arc 
issued li'om a secure, central facility. Below arc summarized findings from her presentation*’; 

• On the first day of central issitancc/facial recognition production, “Maria” applied lor an ID card. A possible 
match with "Herlinda’s’ image wa< found. Herlinda (the victim) and legal resident of Texas had spent five ye<its 
trying to re.solve an identity theft where the IRS was requesting ta-xes owed on $120,000 of income. In January 
2010, a federal grand jury indicted “Maria.” 

• Las Vegas Police provided a photo taken by a surveillance camera in a drc.ssing mom. Tlic image was scanned 
to the facial recognition database and a march was S)und. That march was wanted in connection with several 
gang- related homicides. 

• Tlic U.S. Marshals Office made a request that Nebraska DMV compare a photo from the Utah sex offender 
registry in its facial recognition software. Nebraska's softwatc matched the Utah sex offender photo to a Nebraska 
TD holder, who turned out to he the suspect. Tlic susp>cct had used hi.s brothers personal information to obtain 
a Nebraska ID card. Suspect was found in Florida and taken into ctiscody. 

• Nebraska Stare Patrol Cyber Crimes Unit provided a photo of a man who was arranging to meet with a “13-ycar- 
old girl” (actually a state trooper). Facial recognition matched the photo to a Nebraska license holder and the 
individual was arrested. 

• Of the 163 cases inirtared, 40 of them resulted in arrests, 90 percent of whom had prior criminal hisTo.ric.s and 
50 percent ofwhom were “related to immigration.” 

7. Facial Recognition 

Facial recognition technologies arc not required by REAL ID, but .support the overall goal of REAL ID, which i,s 
based on the 9/ 1 1 Commission finding that a “higher bar” should be set “for determining wherher inriividu.als are 
who or wnat rhev claim to he” (Final Report, p. 384). Such technologies also support the AAk/TVA recommcndatio.n 
rh.ar license holders have only one iicense at a time; they abo protect against identity theft .at the DMV counter. 
A.s of January 201 2, 38 states arc using fecial recognition, .six arc or will be- implementing it, and only 1 2 have not. 

Facial recognition works to ensure that only one !iccn.sc is is.sucd per applicant and can idonLity those that have 
.acquired m-ulciple licenses under different names. These systems in the past few years have been responsible for 
catching identity thieves, wanted criminals, and illegal aliens. Thc.se .systems co.st, for example, $3.5 million in 
Colorado just for upgrades (2012 budget)'"' of $10.4 million in New Jersey (a seven-year contract).'-' However, the 
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anri-traud benefits make the cost worthwhile to these states. Current REAL ID appropriations guideline language 
enables states to use REAL ID federal money to make these upgrades. 

Nearly ever}' state that has implemented facial recognition has a multitude of interesting cases ot identip/ thieves 
caught only because the state beganusing the technology. Texas provides an exarnpieofa state justifying c-xpenditurcs 
on DNLv^ improvemeiiLs in the areas of f^ial recognition, tamper resistant card.s, and protections against internal 
and external corruption in its Department of Public Safety Directors Strategic Outlook, for 2009-2013: 

“To meet the technological needs of the future, the Department continues to enhance the driver’s license 
issuance process through the implementation of current technologies. To addre.ss growing issues we face 
daily regarding identity theft and fraud, the Department's Driver license Rc'cnginecring prejs^ct introduces 
technology needed to both monitor and audit controls to identify .su.spiciou.s issuance activity both from 
external and internal ocaurcncc... . Upon legislative approval, this project provides the necessary fbundatioa 
CO allow for addressing Federal Real ID requirements. Facial recognition ccclinoiogy will also he introduced 
to the issuance process with the development of the image Verification System which will compare the 
applicant’s facial image to the last image on file to prevent identity theft. Tne technology will allow law 
enforcement to export photographic images into the sy'stcm to identify unknown individuals enhancing an 
investigator’s ability to establish new leads. Hie Depwement will include many nev' state-of-the-art card 
security features that will make alteration and counterfeiting the card extremely difficult to successfi.:lly 
achieve.”’^’ 

Oregon’-s program in November 201 1 hit 1 .8 million photos and incidence.s of potential fraud arose in 940 cases 
referred to law enforcement.'^ In one incident sent to us 'oy the Oregon DMV. the ideritiry thief, who stole his 
brother's identity and others, was found guilty of 17 felony counts on other cluige.s and was sentenced to 96 months 
in prison. 

In Kansas, according to a DMV investigator, fecial recognition cacchts “12 to 15 cases of suspected fraud weekly, 
and since July 2004, has lialtcd approximately 1 ,200 cases ofactempted identity chef'c and driver's license fraud.”'” 

Tile chart in chi.s report does not include a separate category for “photo first”, hue Jennifer Cohen, Director of the 
Delaware Motor Vehicle Division, a state that came into substanti.al compliance with REAl. ID in about a year, 
wrote this in an e-mail about customer satisfection and reducing fraud: 

'■Tmplemcncing the photo-iip-front licensing process has been a cwo-fold .succes.s, first it has significantly 
reduced the risk of fraud as we arc able to tun the photo through out fecial rextognidon process to ensure 
the individual is who they .say they arc before issuing a credential and .secondly wc have been able to reduce 
our customer transaction times by 2-3 minutes which speaks volumes about the cffi'ctiveness of our new 
business How. Our customers expect a minimal wait while they arc at our fecilicics and trust that their 
information is secure. Wc have acaimplished that in Delaware.” 


8. Federal Funding to States 

Statc.s and torritorics have received S221.36 million in federal grant monies. Prior vear allocations are detailed in 
last year's RE..^L ID .assessment. “REAL ID Implementation: Less Expensive. Doable, and Helpf;:! in Reducing 
Fraud. ”'’' This past year, direct funding for driver’s licenses w'as discarded, partly duo to rumors that the di'ivcr’s 
license funds were not being used by the stares. As is cleat ftom the data presented here, almost .all states are working 
hard to improve their driver’s license issuance and arc likely spending more than anv federal grant monies providv’d. 
If anything, considering how DhlS is currently absent nom active support for REAL ID compli.ince. states have 
partiv given up asking for more federal money, and arc w'orking from their owm budgets. 
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Even as stares arc exceeding REAL ID requirements, improvements in general arc not as expensive as assessed years 
ago. However, most state,'; ate spending millions, and usually more than DHS allocates. Its notable that in tire 
EY 2011 allocations below, only $27S,000 was returned to the Treasury from FY 2010 allocation to the states of 
$48,000,000 and available for reallocation in FT 2010. Clearly, the states are asing the federal appropriations. 

FY 201 1 appropriation wa,s $44,910,000 to “reduce fraud and improve the reliahility and accuraev of personal 
identification clocutnents th;5t states and territories issue." Note that REAL ID is not mentioned, nor compliance 
with REAL ID technical stancard.s referenced. Last year’s description by the DHS grant office made no mention of 
RE.AL ID e.xcepr tangentially here: 

''As appropriared by t.he Department of Defense and Full- Year Continuing Appre'prLacions Act. 2011 
(Piibiic Law 112-10) and authorized by Title IT of the REAL ID Act of 2005. Division B of the Emergency 
Supplemental Apptopilarions Act fot Defense, the Global War onTerrot, and Tsunami Relief, 2005 (Public 
Law 109-1 ,$), tile FY 201 1 DLSGP provides funding ax^allable to .state driver's licensing authcritie.s (i.e., 
motor vehicle agencies) for FY 2011 DLSGP related projects. The FY 2011 DLSGP provides funding 
CO prevent terrorism, reduce fraud and improve the reliability and accuracy of persona! identification 
documents that states and territories issue. DLSGP is intended to address a key recommcndaticin of the 9/11 
Commi.s.sion to improve the integrity and security of .state-issued driver’s licenses (DL) and identification 
cards (ID). 

“Funding 

Tn FY 201 1 , the total amount of funds distributed under this grant program was S45,188,000. All states 
and territories that applied for FY 2011 DLSGP received a base amount, with the balance of grant 
funds distributed based un ibe total number of drivers licenses and ideniihcation cards (DL/TDs) 
issued in each state.” lEraphasis added. ]“ 

The report then goes on to provide line items per jurlsdiaion th.icadd together the $278,000 left over from FY 2010 
and the FY 201 1 appropriation of $45,188,000: 

Category 1: $1,51 2,900 each for California, Florida, Illinois, New Yirk, and Texas 

Caccgory2s $979,269 each for Alabama, Arizona, Geoigia, Indiana, Louisiana, Massachu.setts. Michigan, North 
Caioliiu?, New Jersey. Ohio, Pennsylvania. Virginia, and Washington. 

Category 3: S701.062eachforArkaus,ts.Colorado,Connccdcut, Hawaii. iewa, Idaho, Kansas. Kentucky, Maryland. 
Maine, and Minnesota. Nfk'-ouri .and Mis.si.ssippi, “through the recovery of previous years' funding received 
! $701 ,062 + 185,6151 and i $701. 062 + 92.3851, respectively.” $701,063 each fe»r Nebraska. New tianipshire. New 
Mexico, Nevada. Oklahoma, Oregon, South Carolina, Tennessee, ULah,''3E'iscon.sin, and West Virginia. 

Category 4t $556,393 each for Alaska, American Samoa, District of Columbia, Dciaw'are, Oua:n, N. Mariana 
Islands. Montan-a. North Dakota, Ihicrto Rico, Rhode island. South Dakota, U.S. Virgin Islands. Vermont, and 
Wyoming. 
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End Notes 

' See hrtp://v, w'.v.cis.orgi'rcal-id-ccrrorist-abusc. 

^ htip:// dps. alabaraa.gov. 

•' hr cp:/./v,'\v\v. ct.gov/ dinv/cwp/vicw.asp?a=4078&q=477742. 
hrrp://w\\w.ohiobrav.c(.sni/Safc_lD_FAC^.pdf. 

’’ htTp://v,'\v\v.uscls.go\7ilink/tk>cVicw/6CFR/HTML/6CFR/0-0-0-l/0-0-n-4972/0-0-0-52n2.hrmi. 

hrrp 5 :.//wwwnctI.sratc.iij.us/trcasHr)'/dpp/cbicl/Bu)’cr/GctDocunicnr.aspx?Dodd= 4 l 72 &’DocNamc= 09 -x- 

20644Appendix9.pdF. 

hcrp;//w\^v.;:is.org/kepharr/nH'>ncana-rca]-id-legal-pre5ence. 

^ hctp;//w\r\v.mainf.gov/tooi.s('wha:snew/inclex.p!ip?topic=Gov+News&:id=74'i926cv= Article-2006. 

^ http://w\vw.u.scis.gov/ilink/docVicw/6CFR/HTN'fU6CFR/0-()-0-l/0-()-0-4972/0-(M)-51 84.hcml. 

hctp://w\vw.lcva!.com/ntw,s/local/Deportatioivfor-Bu!garian-who-.sto!tt-dcad-lv)ys-ID-worl<cd-for- 

OLCC- 1384 l. 32 y 4 .hmiI. 

'* hTrp;//cfi'.vlcx.cora/vid/37-physical"Scairit)'-d.mv-pi-odiicdon-28y 13660(5. 
hTrp://www.c.is.org/ real-id. 

htrp;//www.docsroc.a.nn/dc>cs/82329034/Ccniral-CaKi-Pi'oducrion-and- Issuance-Process— Lesson- Learned. 

htrp;//www.coloradc).gov/cs/S3te!]i:e?blobcol=urldataSfbiobheadetnfimel-0.intenr-Disposition5f 
blobheadernamc2=Cc>inen c-Typc66binbhcadervalLiel=inline%3Bffilenamc%3D%22Drivers+Liceu- 
se+Upgrade+January+2012.pdf%22afbJobheadcrvaluc2=applicacion%2Fpdfti:bk)bke)'-idScblobrable=iVIungoD] 
oh.si®e.biohwherc;=l 231 7668067886i:.s«hinary=irue. 

http://www.scace.fij.Lis/:rpa«ury/purchasc/noa/conEracts/c2466_09-x-20644.shcm!. 

http://w’vVW'.rxdp.s.stace.tx.us/dpsStraregicP!an/2009'2013/07dirccrorsstrategicoudook.pdF 

' http://svivw.ort'ga:')lfVf.com/news-nerwork/index.ssf/201 1/1 1/orcgon_dmvs_fiicial_recognition.html. 

http://candaceschijier.coiT!/sit<*.s/default/rile.s/portfolio/Ca.se%20SLudy4^)20-%20Kan,sas'X'20DMYpdf. 

h:tp://cis.org/tcaI-id. 

''' http;//^\^v-y^r.fema.gov/[xt/governrnenL/granD'201 l/fyi l_dlsgp_fact.sheet.tKt. 
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Mr. Chairman and Members of the Subcommittee — 

The National Association for Public Health Statistics and Information Systems 
(NAPHSIS) welcomes the opportunity to update you on its activities to date in building 
the infrastructure necessary to support identification verification and discuss the ongoing 
challenges. NAPHSIS represents the 57 vital records jurisdictions that collect, process, 
and issue birth and death records in the United States and its territories, including the 50 
states, New York City, District of Columbia and the five territories. NAPHSIS 
coordinates the activities of the vital records jurisdictions by developing standards, 
promoting consistent policies, working with federal partners, and providing technical 
assistance to the jurisdictions. 

Vital Records Serve Important Civil Registration Function 

Vital records are permanent legal records of life events, including live births, deaths, fetal 
deaths, marriages, and divorces. Their history in the United States dates back to the first 
American settlers in the mid-1600s, and in England as early as 1538.' More than 8 
million vital events were recorded in the United State in 2009.* 

Many organizations and millions of Americans use these records — or certified copies of 
them — for myriad legal, health, personal, and other purposes. 

• Birth certificates provide proof of birth, age, parentage, birthplace, and citizenship, 
and are used extensively for employment purposes, school entrance, voter 
registration, and obtaining federal and state benefits (e.g., Social Security). Birth 
certificates are the cornerstone for proving identity, and as breeder documents are 
thus used to obtain other official identification documents, such as driver licenses, 
Social Security cards, and passports. 

• Death certificates provide proof of date of death, date and place of internment, cause 
and manner of death, and are used to obtain insurance benefits and cease direct 
benefit payments, transfer property, and generally settle estates. 

The federal government does not maintain a national database that contains all of this 
information. Consistent with the constitutional framework set forth by our founding 
fathers in 1 785, states were assigned certain powers. The 57 vital records jurisdictions, 
not the federal government, have legal authority for the registration of these records. 


' U.S. Vita! Slatisiics System: Major Activities and Developments. 1950-1995. Centers for Disease 
Control and Prevention, National Center for Health Statistics. Feb 1997. Available online at: 

b.ttD:/./wv.vv.cdc.gov/riclis.''data/miscAisvss.pdf 

* National Center for Health Statistics, Centers for Disease Control and Prevention. Available online at 
Imp /vv'T cdi, a-V'/'Ivlis J itj/databriefsi'dbl6,htm and 
h ttp -v .vvv cdc .‘Oviiciis'Jiit.i'msr/nvsrSS/nvs rdS 25.pdf 
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which are thus governed under state laws. Tlie laws governing what information may be 
shared, with whom, and under what circumstances varies by jurisdiction. In most 
jurisdictions, access to records is restricted to family members for personal or property 
rights, to government agencies in pursuit of dieir official duties, or for research purposes. 
In other jurisdictions, release of records may be subject to less restrictive limitations; and 
in a few states identifiable information from records is publicly available. 

Because birth certificates are essential legal documents linked to identity, and because 
criminals need new identities to carry out their crimes, birth certificates are sought out 
and used to commit fraud, identity theft, and even terrorist activities. Studies have shown 
there are generally two types of vital records fraud: (1) when a fraudulent vital record is 
used by an individual; and (2) when a legitimate vital record is used by an imposter. 

There are more than 14,000 different versions of birth certificates in circulation, issued 
by more than 6,400 state and local vital records jurisdictions. The sheer number of 
different versions of birth certificates makes it nearly impossible for anyone to manually 
differentiate a valid birth certificate from a counterfeit. The result is that criminals can 
and do easily assume new identities to commit crimes. It is therefore essential that birth 
and death records be secured and protected, and that federal and state agencies have the 
ability to verify the source data contained therein. 

The Need for Identity Verification 

Prior to the terrorist attacks on the United States on September 11, 2001, all but one of 
the terrorist hijackers acquired some form of identification document, some by fraud, and 
used these forms of identification to assist them in boarding commercial flights, renting 
cars, and other necessary activities leading up to the attacks. In its final report. The 9/1 1 
Commission recommended implementing more secure sources of identification, stating 
the “federal government should set standards for the issuance of birth certificates and 
sources of identification, such as driver's licenses. Fraud in identification documents is no 
longer just a problem of theft. At many entry points to vulnerable facilities, including 
gates for boarding aircraft, sources of identification are the last opportunity to ensure that 
people are who they say they are and to check whether they are terrorists.” ’ 

There are other cases where individuals have obtained birth certificates of deceased 
persons and assumed their identity, created fraudulent birth certificates, and altered the 
information on a birth certificate, as documented in a Department of Health and Human 
Services Office of Inspector General Report of 2000.^^ In 2009 and 2010, the Government 
Accountability Office (GAO) documented several cases in which investigators created 
fraudulent birth certificates and were able to obtain passports based upon the fraudulent 


The 9/1 1 Commission Report, Final Report of the National Commission on Terrorist Attacks upon the 
United States. July 2004. p. 390. 

' Department of Healtli and Human Services, Office of Inspector General. Birth Certificate Brand, Sept. 
2009 (OEl-07-99-00570). 
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records because the passport office did not verify the birth certificate information." In 
2011, the Federal Bureau of Investigation arrested Khalid Ali-M Aldawsari for 
“attempted use of a weapon of mass destruction.” When the FBI searched Aldawsari’s 
apartment, agents discovered that Aldawsari had plans to obtain a forged U.S. birth 
certificate and obtain multiple drivers’ licenses for the purpose of renting several 
different cars to carry out his attacks. Aldawsari recognized that birth certificates can be 
used to obtain multiple identification documents such as passports and driver’s licenses. 

EWE is an Effective Tool in Preventing Fraud, Identity Theft, and Terrorism 

Heeding the recommendations of the 9/1 1 Commission, Congress enacted the REAL ID 
Act in May 2005. The REAL ID Act and its corresponding regulations (6 CFR Part 37) 
require that applicants for a driver’s license present their birth certificate to the motor 
vehicle agency to validate their U.S. citizenship and their date of birth, and that birth 
certificates must be verified by the state. Sec. 37. 1 3 of the identification standards 
regulations recommends that states through their departments of motor vehicles (DMV) 
should use the Electronic Verification of Vital Events (EWE) system, operated by 
NAPHSTS, to verify birth certificates presented by applicants. 

EWE is an online, query-based system that verifies birth certificate information. It 
provides authorized users at participating agencies with a single interface to quickly, 
reliably, and securely validate birth and death information at any jurisdiction in the 
country. In so doing, no personal infom}ation is JimIgeJ to the person verifying 
information — EWE simply relays a message that there was or was not a match with the 
birth and death records maintained by the state, city, or territory. 

With support from the Department of Homeland Security (DHS), NAPHSIS has now 
installed EWE in 38 vital records jurisdictions, with 10 jurisdictions in the process of 
implementation. NAPHSIS has also procured a data analysis and quality control tool that 
all jurisdictions can utilize to analyze their EWE data for anomalies, inconsistencies, 
accuracy, and completeness. This tool and the analysis of EWE data has been completed 
in 30 jurisdictions to-date. 

EWE is currently used by several federal and stale agencies to verify identification and 
authenticity of birth certificates. 

• As part of a seven-year pilot program funded by the DHS, three state DMVs — ^North 
Dakota, South Dakota, and Iowa — used EWE to validate LT.S. citizenship and date 
of birth, and verify the authenticity of birth certificates presented to obtain drivers’ 
licenses. As of 2011, the pilot funding is no longer available and these DMVs have 
thus discontinued their use of EWE to verify identity on state-issued drivers’ 
licenses. 


’ Government Accountability Office, Department of State: Undercover '1 ests Reveal Significant 
Vulnerabilities in State 's Passport Issuance Process, Mar. 2009 (GAO-09-447 ) and State Department: 
Undercover Tests Show Passport Issuance Process Remains Vulnerable to Fraud, July 2010 (GAO- 10- 
922T) 
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• The Department of State’s Passport Fraud Prevention Managers commenced using 
the EWE system in March 2009 for birth certificate verifications. In their first six 
weeks of use, there were two instances where the Fraud Prevention Mangers used the 
EWE system to electronically verify the birth certificates, and EWE returned a ‘no 
match.’ Upon further follow up with the vital records offices that ‘issued’ the birth 
certificates it was detennined that indeed the birth certificates presented with those 
passport applications were fraudulent. Based on these and other successes, NAPEISIS 
is currently working with the Department of State Passport Services to improve usage 
volume of EWE. 

• The Social Security Administration, which funded the initial development and testing 
of EWE in 2001, uses the system to verify proof of age and place of birth as a 
program policy requirement. 

• The Deficit Reduction Act of 2005 requires the verification of citizenship and identity 
for enrollment in Medicaid through a birth certificate or other official document. The 
South Dakota Medicaid Office was the first to use EWE for this purpose in 2007, 
followed by Medicaid Offices in Mississippi, Minnesota, and Washington. Since 
then, several other states have inquired about using EWE. 

These EWE users — as well as voluntary users at the Office of Personnel Management, 
the Arniy National Guard, and other state agencies — are enthusiastic about the system, 
citing its usability and ability to protect against fraudulent activities, safeguard the 
confidentiality of data, and improve customer service. 

Federal Investment in Infrastrnctnre Could Help Speed EWE Adoption 

Despite EWE’s security, speed, and ease of use, the system is only as good as the 
underlying data infrastructure upon which it relies. E’WE faces resource-related 
challenges that may impact our ability to harness the system’s full potential: 

• Most vital records jurisdictions have electronic birth records that extend back for 
several decades, and the utilization of the EWE system has proven that these 
databases can be used effectively. However, only 85 percent of birth records dating 
back to 1945 are available in electronic form. To recognize EWE’s full potential to 
protect our nation, 100 percent of birth certificates in 100 percent of jurisdictions 
should be in electronic forni. In addition, some data should be re-keyed to improve 
quality. Among the vital records jurisdictions that participated in the American 
Association of Motor Vehicle Administrators (AAMVA) birth verification pilot, 
those jurisdictions that have not cleaned up their files are experiencing only a 90 
percent match rate. With clean data files, the match rates would exceed 95 percent. 

• There are cases where an individual has assumed a false identity by obtaining a birth 
certificate of a person who has died. Therefore, it is important that resources be 
provided so that all death records are electronically linked to birth records. Most 
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jurisdictions have linked infant deaths, and in many cases linked deaths to persons 
under 45 years of age. In the cases where birth and death records are iinked, EWE 
will return a “deceased” indicator to the requesting agency, which will confirm that 
the documentation presented is fraudulent. 

• NAPHSIS collects fees from EWE users to cover costs related to the system’s 
operation, such as technical support and maintenance, system and business operation 
support, and vital records jurisdiction fees to support EWE query access to birth 
data. Providing federal funding to DM Vs to cover these costs could increase EWE 
usage and help prevent the fraudulent use of birth information in acquiring driver’ s 
licenses and identification cards. Since the transaction fees are volume based, the 
more EWE users, the lower the costs of use will be. 

The jurisdictions’ efforts to digitize, clean, and link vital records have been hindered by 
state budget shortfalls. In short, the jurisdictions need the federal government’s help to 
complete building a secure data infrastructure in support of electronic identity 
verification. 

DHS is in the earliest stages of supporting a new project to close loopholes that 
contribute to identity fraud. In this “reciprocal pilot,” three DMVs will use the EWE 
system to verify birth certificates, and three vital records jurisdictions will use the DMVs’ 
driver’s license verification system to verify driver’s licenses that individuals present to 
obtain copies of birth certificates. The development of the interface should take about one 
year and once installed, the pilot will last 14 months. During the pilot, the DMVs and 
vital records jurisdictions will jointly investigate instances of “no matches,” detennining 
why a no match occurs and developing business practices to handle no matches. 

The 9/Tl terrorists’ ability to obtain valid government issued IDs, and the GAO’s ability 
to obtain passports using fraudulent birth certificate data, reinforces the merits and 
importance of the birth verification. We feel strongly that investment in EWE will 
strengthen Americans’ safety and security by accurately, efficiently, and securely 
verifying birth data on the 245 million driver’s licenses issued annually. More than one 
decade after our nation’s darkest day, isn’t it time to implement the 9/1 1 Commission’s 
recommendations and secure official forms of identification? 

NAPHSIS appreciates the opportunity to submit this statement for the record and looks 
forward to working with the Subcommittee. If you have questions about this statement, 
please do not hesitate to contact NAPHSIS Executive Director, Patricia W. Potrzebowski, 
Ph.D., at ppotrzebowski@naphsis.ore or (301) 563-6001. You may also contact our 
Washington representative, Emily Holubowich, at eholubowich@.dc-crd.coi'n or 
(202)484-1100. 
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IDENTITY DOCUMENTS 


I CALL TO ACTION: THE GROWING EPIDEMIC OF 
I COUNTERFEIT IDENTITY DOCUMENTS AND PRACTICAL 
STEPS TO COMBAT IT 


The commercial, academic and 
government members of the 
Document Secuiity AlHance have 
teamed together to provide an 
Informative summary of the 
growing epidemic of counterfeit 
Identity documents ar>d the 
practical steps to combat It. We 
star>d prepared to provide 
assistance and answer questions to 
help government organixations 
irriprove the security of their 
Identity documents. 
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The Problem - High 
Quality Counterfeits 
Are Flooding America 

Off’Sfwre counteffeittng rmgs M 
parVevtaTr ana eounrerfe/r rfngs 
resident In the United States are 
laing scanning and Image 
manipulation technology along 
With advanced software and 
prinrefs to produce countertert 
driver's licenses which are very 
difficult ro dtscem from valid 
driver^ licenses. These 
counfer^ts are being successfully 
passed in a vanety of crfhcaf cfay> 
ro-day situations. 


Because of BMAL JO Act 
compf/errce and Increased use by 
stabss of Identity vertficaticn 
systems such as 5SOLV and 
SAVCf those IMng or operating 
under assumed names are 
Increasingly finding themselves 
blocked at driver's license 
Issuing apencfes whan 
attempting to gat "valid" 
identtticatien. Conseqoentfy, 
they seek high quality driver's 
llcanse counterfeits and 
counterfeit "breeder documents" 
such as birth certfffcates. 

There Is a growing sophistication In 
high quality counterfeit driver's 
licenses and state issued IDs, 
some of which are produced 
overseas ar>d others In major 
metropolitan areas by prohessional 
aiminals. In particular, there Is a 
virtual flood of low cost, high 
quality counterfeits being ^pped 
by the tens of thousands from 
China via the website iDChl^.ph. 
Although this site t$ the rnost 
prominent, It Is not unique. 


Enforcement of important U^. 
laws, as well as our safety and 
security is threatened, as 
purchasers of counterfeit IDs use 
them for purposes beyond 
underage drinking. The federal 
program for verifying eligible 
employees (E^Verify) arid the 
Nabonal instant Criminal 
Background Check System (NICS) 
used by gun stores to comply with 
the Brady Handgun Violence 
Protection Act both depend on the 
reliability of tOs (usually driver's 
licenses) presented by those 
subject to the check. 

Federal and state laws recognize 
three types of "false* Idenbty 
documents: 

1. Counterfeit identity documents 
that emulate the features and 
characteristics of valid IDs 
issued by state and federal 
governments. For decades, the 
pre f err e d counterfeit ID Is a 
counterfeit driver's license with 
an uneMpired date. 

2. Valid Identity documents, 
usually Issued In the name of a 
Aetttious or stolen idenUty, 
obtained through fraudulent 
means. 

3. Valid identity documents that 
have been altered after 
issuance to change a name, 
photo Image, age, or other 
biographic descriptor. 
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IDENTITY DOCUMENTS 


Oriv€f's licenses ere a 
eavorttm Target for ID 
Countarfetters 

Driver's licenses are the <Jocument 
of choice for foentlty purposes in 
the United States 

> A valid driver's license will get 
someone onto any domestic 
airline flight within the United 
States. 

> Visual authentication of any 
secure document, such as a 
driver's license, normally 
requires Che inspector to make 
a quick determination that 
features from the document, 
like the i^otograph, 
demographic information, 
security features, and 
substrate are genuine. 

Driver's licenses or passports 
are required for Brady Gun 
Checks and by employers using 
e-Verify. They are also 
required as proof of 
Identification for boarding 
airplanes and for listed 
(controlled) pharmaceutical 
products like Oxycontln and 
Methamphetamine. 


Counterfeit IDs Impact 
National Security. Homeland 
Security. Public Safety and the 
Economyt 

Public Safety; (1) Underage 
drinking and habitual OUl 
offenders on the highways; (2) 
Increased levels of fraudulent retail 
and Internet purchases of 
controlled substances such as 
amphetamines, barbiturates, and 
narcotics such as hydrocodone and 
oxycodone. 

According to the Department of 
Justice. In 2007, American society 
suffered an estimated $193 billion 
In losses from illicit drug use 
through crime, heafth and 
productivity costs. A 2011 report 
Indicated (hat 16% of Inmates in 
federal prisons convicted on 


forgery and fraud charges have 
their offenses classified as ‘drug- 
induced*’ Additionally. 399b of 
those In jail and 42% of those in 
state and local prisons on 
convictions of forgery and fraud 
have their crimes classified as 
‘drug-induced*.’ In nearly all 
cases, the link occurs because drug 
addicts can purchase controlled 
drugs using counterfeit IDs, 
especially when combined with 
counterfeit doctors' prescriptions. 
Homeland Security: Increased 
levels of Illegal gun purchases as 
brought to tight by recent Mexican 
cartel activities and drug 
distribution rings In major U.5. 
cities. Using a counterfeit driver's 
license is e common method used 
by felons and straw purchasers to 
avoid detecoon by NICS checks. 

Over the last five years, Mexican 
authorities have conhscated over 
94,000 firearms. 64,000 of which 
originated in (he US. Weapons 
from "Fast & Furious*, are coming 
back in(o the US.^ It has been 
known for many years felons and 
straw buyers of gur>s rely on fake 
IDs to disguise their tr\*e identities, 
so many arrested are convicted of 
forgery and fraud as well as for 
Illegal gun purchases.^ 

National Security: Jihedlst 
terrorists and homegrown 
extremists have used oourtterfert 
driver's licenses to rent cars and 
trucks, and to buy chemicals or 
certain fertilizers to derive high 
potency explosive comporvents. 
Examples Include Oklahoma Oty 
bomber Timothy McVeigh. 

The 9/11 Commission Report 
states unequivocally that Travel 
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documents are as important as 
weapons* (p. 3»4) Recently, the 
indictment of terrorist suspect All 
Saleh Kahiah al-Marri, who has 
been linked to alleged Sept. 11 
paymaster Mustafo Ahmed al- 
Hawsawl, stated that el-Marri was 
arrested with a laptop computer 
that had 1,000 stolen credit cards 
account numbers on it. along with 
a host of Internet bookmarks 
pointing to fraud and fake 10- 
related sites. 

Crime: The “DC Sniper* John 
Muhammad was a proficient dealer 
in counterfeit driver's licenses, 
both CO assist his Illegal alien 
smuggling activities In Antigua, 
and for domestic criminal 
purposes. 

Criminals often use counterfeits to 
conceal their ftctitlous or stolen 
identities to commit crimes, and/or 
hide from law enforcement. 

The Ben Bemanke check fraud 
case was pari of a multi-state gang 
operation that successfully used 
counterfeit driver's Hcenses to 
drain bank accounts. 


State ana Federal law 
enforcement Are On the Job 
but Ovorwhelmod 

enforcing federal laws Is critical 
to stopping the flood of 
counterfeit driver’s licenses. To 
constrain faivbreaAers using 
counterfeit IDs, an ounce of 
prevention, through an 
aggressive defense, will enhance 
public safety and significantly 
reduce firtandal losses to federal 
agencies and Institutlorts. The 
resources expended to prosecute 
the providers and users of 
counterfeit ID’s are a fraction of 
the benefit returned In reducing 
economic losses experienced by 
both the federal government and 
commercial businesses. 
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IDENTITY DOCUMENTS 


This summer (2011), U,S. Custom 
and Border nt>tectlon spokesman 
Brian Bell descrioed the surge of 
counterfeit lOs coming in from 
overseas. *S(nce January we have 
caught about 15,000 IDs,* Bell 
said ”ln the past we would see 
rrtaybe 10 to 15 per year * in July 
2011, officers m a Chicago suburb 
arrested 40 students between the 
ages of 17*20 for Hcerises that 
were hidden Inside a game shipped 
horn OUna. The shipment 
contained 1,700 fake IDs, 
according to the Cook County 
Sheriff's office.* 

In February, a high-tech ^ke 
Identification mill In Layton, Utah 
was dismantled by the Utah 
Attorney General's SECURf Strike 
Force when special agents arrested 
three illegal aliens and seized 
equipment used to make a wide 
assortment of Identity cards from 
different states artd countries. 
Agents seized computers, pfirrters, 
laminating machine, cutters and 
high quality blank printing stock. 
They also confiscated Mexican 
consular identification cards, driver 
licenses from Utah and other 
states, Social Security cards and 
electrician licenses. SECURE Strike 
Force Commander Rhelt McQulstorr 
said, "We found incredibly realistic- 
looking idenOflcatlon documents. 
We have also never seen anyone 
creating false identification cards 
from so many states and federal 
government agencies.** 

Also In February, Investigators 
from the North Carolina Motor 
Vehicle Department responded to a 
tip from a temporary agency that 
people were using what appeared 
to be fake identiBcation documents 
when applying for Jobs. 
Investigators found fake driver's 
licenses from several states 
indudlrrg North Carolina, Texas 
and Cattfomia. They also found 
fake Social Security Cards and 
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Permanent Resident cards. ’'They 
had Uie capability of making fake 
ID'S from any state," lead 
investigator Jessica Walker said. 
Although the suspects in this case 
are Illegal Mexican Immigrants, 
that's r>ot always the case, said 
District Supervisor Rena RIkard of 
the DepartmerH of Motor Vehicles. 
"There are a lot of people out there 
doir>g this,* she said. "It's not just 
Mexicans who are doing it either 
It's everybody." 

The recent wave of foreign 
produced high quality Fake IDs are 
difficult to discern without the use 
of technology or people well 
trained m forensic document 
analysis, using the special tools of 
the trade. Those states wor1Ur>g to 
comply with REAL 10 rules ere 
training DMV personnel and local 
law enforcement to recognize 
counterfeit Driver's Licenses, 
notably Ohio, New Jersey. New 
York, Connecticut and Florida. 

Many other states, however, 
provide little or no comparable 
forensic document training to local 
law enforcement There is also 
very limited use of card scanning 
technology by state and federal 
law enforcement or security 
personnel at 10 checkpoints at 
airports and elsewhere. 

There are Solutions 

Law enforcement actions by 
federal officials, led by the FBI and 
ICE, are notable, but are only 
capable of arresting a small 
proportion of the criminal gangs 
who produce and sell the 
counterfeits. To be more effective, 
the following solutions should be 
considered; 


Trefn our gatelceepe r y: Frontline 
personnel in vulnerable areas of 
commerce, federal bulldlrrg 
security personnel and local police 
should become trained In basic 
methods of identity document 
mithentlcatton, and have tools 
available to assist in distinguishing 



counterfeit IDs from valid IDs. 
Reference guides to state licenses 
are essential tools for 
authentication, as oiunterfelt 
driver's licenses are most often 
used In states other than the state 
from which the document Is 
counterfofted. 

Stronger card security for state 
and federal issued IDs and Driver's 
Licenses-. 

• Incorporation of levels 1, 2, 
and 3 security features Into 
documents. 

• Better understanding and 
usage of advanced 
authentication technologies. 
There are a variety of effective, 
easy to verify optical 
technologies whidi cannot be 
easily copied. These can be 
combined with other level 2 
and 3 security features to form 
a layered approach to security 
that has proven effective. 

Specfaltzed and secure card 
production materials designed to 
prevent counterfeiting and that are 
limited In access and costly to 
obtain. 

Use of ID card scanning 
teebno/ogy for routine inspections 
of IDs to detect counterfeits 

• Use of technology that does 
more than verify a bar code. 
Because sophisticated ID 
counterfeits produce bar codes 
that are imp^ble to 
differentiate from valid IDs. ID 
readers MUST be able to verify 
security features as well as bar 
codes. 
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Ccmgrcn N«ed* to Affirm our 
Natlonol Commitment to 
Reduce Ftnanclel and Social 
Losses from Counterfeiting 

IVe recommem/ Congress 
•mp/wslre ttrong support for 
enforcement of focferaf mnU- 
eountorfolt, low enforcement 
task forces. Congressional 
oversight should challenge the 
Office of U.S. Attorneys to 
actively prosecute alleged 
criminal offenders, 

• Previously, 1C£ put more 
resources Into counterfeit and 
fraudulent document task 
forces. This has been de^ 
emphasited over the past two 
years. Congressional Interest 
In DHS' efforts to investigate 
and prosecute crlmirMt rings 
would increase ICE'S resource 
allocation. The FBI has begun 
to more actively Investigate 
and prosecute international 
criminals using counterfeit 
identity documents. 
Congressional support for these 
activities would le^ to a 
greater resource allocation by 
the Department of Justice. 

We recommend the continuation 
of Department of Homeland 
Security grants supporting 
forensic document training for 
local taw enforcement. 

* These grants expend the 
capability Of state and local 
poiKie to Identify those 
presenting counterfeit 
documents. This Is of great 
importance as those 
representing local governments 
are the first tines of defense 
against counterfeit identity 
documents. 

We recommend Congressional 
committees of Jurisdiction 
request a 6AO review of Che 
federal egencies Involved In 
fraud and counterfeit defense to 
assess end measure their 
Improvements. They should 
consider adding this requirement 
to the respective OHIces of 


Xnspector Genoral of the federai 
agencies most mt risk of financial 
loss through crimes enshled by 
counterfeit Identity documents. 

• Exlstlrvg federal laws to 

penalize the use of counterfeit 
IDs are tangential to other 
fraud statutes her>ce these 
dimes are rarely prosecuted. 
Additional Congressional 
Oversight would Increase 
attention to requiring use of 
federal agendas to identify 
counterfeit IDs used to access 
federal buildings. 

Law entoKament agencies can 
use existing federal laws to 
prosecute and penalize 
criminals who counterfell IDs 
and driver's licensesi 

1 18 U^C Sectton 1028|a)(S) B 

Possession of Document-Making 
Implements; 

2. 18 U.S.C. Section 102fi(a)(8) 8 
Trafficking m False 
Authentication Features; 

3. II U.S.C. Section 1342 B Using a 
Fictitious Name or Address; 

4. 18 U.S.C Section 1S46 B Fraud 
& Mttuse of Visas, Permits, A 
Other Documents; 

5. IB U.S.C Section 371 8 
COr^lracy, 

6. 18 U.S.C Section 1326(a), 

(bK2) a Qlegal Alien Found in 
the U.S. Following Deportaaon 

A 201 1 Los Arigdes olmtnal case 
Utustrates how federal statutes were 
used to prosecute more than two 
dozen IndIviduBis in a massive 
ffauduterit document operation. The 
ID ring was producing counterfeit 
driver's licenses for 40 of 50 U.S. 
states. These counterfeit IDs were 
used In the “commission of credit 
and bank fraud, tax fraud, Identity 
theft, and pharmaceutical diversion 
schemes... the foise document 
manufocturlng dng produced raw 
materials for the manufoeture of 
thotsands of documents por month 
that were disblbuled in CaNfomia 
and across the United States.^ 


4 



The OSA recommends our 
Congressional leadership 
support counterfeit ID 
prevention In a manner that 
prtorltfzes public safety, fraud 
reduction, and the 
optimization of collected 
revenues. 

XD counterfeiting facilitates a 
wide range of Illegal activities. 
The cost to society far exceeds 
the naive popular perception that 
"Fake ZDs'* are only for underage 
kids trying to get Into a 
tavern. Counterfeit IDs ere a 
primary means to fraudulently 
obtain access, benefits, and 
prescription drugs for illegal use. 
Transnational criminal gangs 
operate across the United States 
counterfeiting driver's licenses, 
birth certificates, and other 
Identity documents costing 
consumers, businesses and 
government benefits agencies 
hundreds of Smilllons annually. 
tD Counterfeiting has become a 
major gateway for criminals to 
steal. Injure and, In some cases, 
terrorize the public. 

Federal laws sufficient to 
criminalize lO counterfeiting 
already exist, as do the agencies 
authorized to enforce them. As 
Congress considers how best to 
reduce the current deficit, It’s 
Important to consider thst the 
fraud prevention savings to 
commerce and society well 
exceeds enforcement costs. Our 
nation's commitment to continue 
to fund Identity document 
protection should not be in 
question 


*m»»— ■wwiuant. 
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IDENTITY DOCUMENTS 


APPENDIX 


Important Fotferat DoflnItloRS to ProMcuUon of ID Counterfeiting Crimes: 


TERM 

omNtnoN us code 

AHllMRttntfon 

PWMVO 

BM term 'authandcation feature* means any haiogrimr waterrnarti. certtflcaaon, symbol, code, 
Miaiv sequence of numbers or letters, or other fteture that etther indivioiiaify or In combination i 
Wtfi another feature is used by the issuing authortiy on on Idendficabon docurnent. document* 
gaUaginpliaeRt, or meant of tdenunezUon in determine d the docurnant IS counte/fert, BRered, ^ 

19 use 

u»a 

(dMD 

SdenUfIcaUon 

Document 

|the term *identlbCBtion document* mcarv a document made or issued by or under the authority oil 
^h« unitad States Government, a State, poMcal subdivision of a State, e sponsoring entity of an 
levent designated as a special event of national significance, a foreign government, political 
jsubdrvTsion of a foreign government, an international govemmentii or an iniemationai quasi* j 

jgovemmental organizauen whidi, when completed wtth information concerning a particular i 

iindividuai, is of a type Intended or cemmonty accepted for the purpose of tdenttflceUon of ' 

^nhduals: i 

18 use 

1028 

[a){3) 

1 

1 

Petee Identtflcation 
IWirimiant 

term 'folM IderitmceOOn documenr niMns a document of a type intended or oomminlv 
•ooipted for the purpoeee of tdemmcetion of individuals ihai*- 

(A) IS not issued by or under me euthonty of a governmental entity or wm issued under the 
authonty of a governmental antay but was subtequentiv altered for purposes of daeeR; snd 

(b) appears to be issued by or under the euthorRy of the United State* Government, a State, a 
poMiM arbdMsion of a Scat*, a eponaonng entity ef an event designated by the President as a 
special event of national sfgrwfleanca, a foreign gevomment, a poMicai subdhrMon of a foreign 
gevamment. or an international govemmeital or quasi -governmental organlcatlDn 

18 use 
1028 
<«»)(<> 

1 

Pals# Authentication 
feature 

m term *fotse authentication feature* means an autnenticaOon feature that** 

i|A) is genuKie m ongm, but, wohouc me authorization of the issuing authonty, has been umpf^ 

Intih or slterad for purposas of deceit; 

1 (B) Is genuine, but hat been distributed, or is Intended tor distribution, without the authonzatlen 
the issuing authonty and not m connection wRh a lawMIy made idenbflcstton document. 
fdooj'T.c'it' makmg implement, or means of Utenancatlon to which such aiAhanttcatlon feature Is 
■titended to be affixed or embedded by the respective Issuing authority; or 

1(C) appears b> be genuine, but is not 

1|8USC 

jioia 

jtd)(5) 

1 1 

Tuvlrp Authority 

the term *iaMaig authotitv**' 

.(A) means any governmental eiHRy or agency that Is awthortzed to issue idanifneauon documents, 
means of Ueritiflcstion, or authenbeetion fea^rs; and 

(B) inefodes tha Unitad States Government, a Scate. a peMtkai suOdMbon of a Scste. a 
apensonng anthy of an *ivent desigruitsd by tiie Prealelent as a spaciai avtnl of national 
■ignihcincd, a Inreign goverrmant, a pollUal subdlvlslDn of a foreign government, or an 
bitamabonai gaarentaaDt or guaai*governmantal organtHtien 

IB use 
1028 
|(0Ke) 


204 E Street. HE 
Wasnington. DC 30002 
Pnonr; 202/543-SS52 
Pm. 202/547-634e 
mm.OecumentMQjntvelMnceuerg 
•nfa(goKummtsecuntvs*teAce.org 



:hc Document Security AlMence (DSA) Is • net-for>proflt organizatwn created by government agencies, private industry and academia m thr 
attar September ]1, 2001. Stficc tnat time DSA has worked (o improve document seainty at aH levels of govemmont and erhdr>i.« 
Our nation's economic, personal, and hemctand security for the 2lst century. OSA's goal is to tdertUfy methods of •mproving s«o>r.fv 
L}.x..<TH;nts end related procedures to combat fraud, terrorism, megat ennwgrebon. idanuty theft, and other criminal acts. The DSA members - 
U both govemm«)t and pnvale industry draw upon a wide range of lenomedge and detailed technical dlsdplines to accompltsh th«s go*> 
n^e group IS commuted to devciooing recommendations for appropriate federal and state government i^enoes, private industry, and 
pohcymaiiers 
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IDENTITY DOCUMENTS 


ATTACHMENT 1; FRAUDULENT DOCUMENT 
ENTERPRISE 


competing gangs i^ith 
physical force or murder. 

Counterfeit XDe 
Mana^tctured end Sold: 


Thirty Indicted xn 
US Court for 
Involvement in 
Violent Identity 
Document 
Counterfeit Ring 

A Flourishing Fraudulent 
Document enterprise 
(POe): 

This particular Fraudulent 
Document Enterprise (FDE) 
* was a massive, complex, 
and transnat>or>al 
counterfeit Identification 
document manufacturing 
ring, operating In 19 
different U.S. cities across 
11 states, with a base of 
operations In Mexico. The 
criminal organization's 
members and associates 
engaged in the illegal acts 


' A fraudutont Doaunent 
Enterprise is defined by Title 18. 
use. Section 19«1(4) that b a 
group of Individuab assoersted 
in fact although not a legal 
entity. An FOE b a form of 
organized enme In this 
particular case, the gar\g was 
also part of a transnational 
organized criminal gang, where 
the owners and managers are 
located outside the United 
Slates 


of felse document 
trafflddng, money 
laundering, kidnapping and 
murder. FDE is a highly 
organized gang with a cell 
based ftructure, a mutti' 
level chain of command, 
and supervision from 
within Mexico. Federal 
prosecutors say the 
organization functioned 
like a "multinational 
corporation'’. The group 
was Identified and 
“dismantied'' by 
Immigrations and Customs 
Enforcement (ICE) agents, 
charging thirty for their 
Involvement within the 
enterprise. Twenty seven 
of the defendants have 
pleaded guilty. However, 
the nianagement team 
remains at large In Mexico, 
and it Is likely that new 
FDEs will be established to 
meet tiie demand. 

ICE reports that this gang 
was unique only for Its 
high level of violence, but 
similar counterfeit 
document rlrigs are 
operating all over the 
country. The gang's leader 
went by the name "El 
Mueito,” Spanish for the 
"dead one.* The gang did 
ruzt hesitate to attack 


This gang produced and 
sold driver's licenses, state 
ID cards, foreign driver's 
licenses. Permanent 
Resident Allen cards, Social 
Security cards, foreign 
identifreation cards. Nearly 
2,000 fraudulent 
documents were seized by 
authorities, along with 
computers, printers, 
packages of card*mak)ng 
stock, and other 
miscellaneous document 
making tools. 


Virginia Beach, VA 
Chelsea, MA, 
Richmond. VA, 
Norfolk. VA . 
Manassas, VA 
Fayetteville, AR 
Uttte Rock, AR 
New Haven, CT 
Mishawaka, IN 
Lexlrigton, KV 
Louisville. KY 
St. Louis, MO 
Chapel Hill, NC 
Greensboro. NC 
Raleigh. NC 
Wilmington, NC 
Oncinnati, OH 
Providence, RI 
Nashville, TN 


Where: 



DSA 
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IDENTITY DOCUMENTS 


J 


Murder: 

Gang ceHs used strong 
violence to drive out 
competition within each 
city of operations, 
ir>dudlng kidnappings, 
beatings, and murder. In 
July 2010, Edy Oilverez- 
Jimlnez, the leader of the 
gang's little Rock cell, 
kidnapped a competitor, 
bourKl, gagged, and 
blindfolded him and then 
beat him to death. 

Moo0y: 

The documents were sold 
at $150* $250 per set of 
two. Usually, this was a 
Permanent Resident Alien 
(Green) card along with a 
Sodal Security card, for 
example. A tracking of 
Western Union wire 
transfers from cell leaders 
to u|^r management In 
Mexico showed a total of 
more than $1,000,000 m 
Illicit funds moved from 
January 2008 to November 
2010. 


Can the IV/daspread ID 
Counterfetting 
enterprises Be Stymied 
by Prevantfon? 


Too many state drivers' 
licenses are ti>o easily 
counterfeited. Oecause 
driver's licenses will only 
beccwne more valuable to 
felons and others as a way 


to evade federal and state 
laws m the future. It's 
critical that state DMVs 
incorporate new 
technologies In identity 
documents issued, 
including driver's licenses. 
Many of these new 
technologies have proven 
to be nearly counterfeit 
proof. Had ti>e targeted 
states' driver's license 
issuing agencies 
incorporated more security 
features into their 
documents, the driver's 
llcer^ses and ID cards 
would not have 'passed* 
scrutiny and been so 
widely accepted. States 
can also do much more to 
provide training to 
merchants, banks, and 
employers so they are alert 
to counterfeit IDs. 

^otes; 

Tbe gang is ^devoted to 
the production and sale of 
false identification 
documents*. 

Federal Indictment 

They real/y ran this like a 
business and used a 
business model where 
people would be promoted 
based on the amount of 
money they brought In. 

- John Torres, ICE 

Based on the guilty plea 
today, the hope and 
expectation Is that It will 


have a chilling effect ... on 
this type of activity. 

Nell MacBrIde, 
Federal Prosecutor 
overseeing the case 


Fir<rMehlrtg fake docurnam rirtg 



Sources: 


United States District Court 
for the Eastern District of 
Virginia v. Israel Cruz 
MIten, et al. Criminal No. 
3:t0cr308. 2/23/11. 


O'Dell, Larry. *U.S. fake ID 
case nets guilty plea*. 


11/18/11. 


Johnson, Kevin. 
'Prosecutors pursue fraud 
ririg, cite 'unprecedented' 
violence”. USA Today. 
3/7/11 


'Guilty plea for man In 
violent fake ID case”. 

11/15/11. 

December 2011 
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ATTACHMENT 2: Where 
! Cards Are Required Proofs of Identity 


Where are 
DRIVER'S UCENSES 
required as 

PROOFS OF 
IDENTITV? 

A driver's license is the 
preferred rdentiflcation 
document for law 
enforcement, employment 
and commerdal 
businesses. It is only when 
a patrolman stops a 
speeding driver, or 9 traffic 
accident occurs, that a 
driver's license is used (o 
prove lawful eligibility to 
operate a motor vehide. 
When we stop at a bank 


Wat/ona/ Security 
Maritime workers 
Ports 

Homcisnd Security 
Federal fodlities 
Cruise ships 
Truck rental office 

Public Safoty 
Teachers 

Home health care workers 
Elder care workers 
Child care providers 
Indian gaming 
Nursing homes 
Ulan originators 


teller line, or the bank's 
drive through teller, we are 
accustortved to provide our 
driver's license as proof of 
Identity to cash checks or 
Withdraw funds. A driver's 
license is used to prove 
Identity to apply for a )ob, 
purchase a gun, or board 
an airplane. Every adult 
needs a driver's license or 
a stale issued idenliOcatlon 
card as a fact of everyday 
life. 

As security measures have 
tightened throughout the 
past decade, so has the 
need tor accurate 
identifjcation venfication. 
Along with airports and 
federal facilities. 


SSA offices 

Public assistance offices 

Tavern 

Restaurant 

Check cashing offices 

Banks 

Credit unions 
Office of vital records 
Post office 
Courthouses 
Hotels 

Sporting goods stores 

Retail alcohol / tobacco 

sales locations 

Public schools 

Colleges 

Casinos 

Pharmacies 


businesses have also been 
increasingly reliant on the 
driver's license as an 
accurate proof of identity. 


The lifted locetlens 
require driver's licenses 
and stetm issued ZD cards 
or passports. That Is, 
everyone must offer 
proof that you are who 
you say you are. 

The locations are 
categorized as National 
Security, Homeland 
Security, and Public 
Safety, as well as all three 
combined. 


All of the Above 
Private security guards 
Airport workers 
Hazmai drives 
TSA 
OMV 

Rrearms dealers 
Employers 
Highway patrol 
Trains 

Office build(r>g seoirity 


Voting/reglstration polling 

places 

Jury duty 

Town clerk 

Mamage license 


iO«ISW«ctM 
WMhii««»i K nODI 
•W* X>2/S<>SSSI 

irwHwtc* vt 
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Prepared Testimony for Brian Zimmer 
President, Coalition fora Secure Driver's License 

U.S. House of Representatives Committee on the Judiciary 
Subcommittee on Terrorism, Technology and Homeland Security 
On 

"Secure Identification: The REAL ID Act's Minimum Standards for 
Driver's Licenses and Identification Cards" 

Washington, DC 
March 21, 2012 

The Coalition for a Secure Driver's (CSDL) is pleased to have the opportunity to provide the 
Subcommittee with comments for the record in connection with the Subcommittee's hearing 
entitled, "Secure Identification: The REAL ID Act's Minimum Standards for Driver's Licenses and 
Identification Cards." 

CSDL would like to thank Subcommittee Chairman E. James Sensenbrenner and Judiciary 
Committee Chairman Lamar Smith fortheir leadership and for holding this hearing. Since the 
REAL ID Act's enactment. Congressman Sensenbrenner and Chairman Smith have been true 
champions of the states. They have supported state funding for compliance with the REAL ID'S 
regulatory standards and ensured that the Department of Homeland Security (DHS) fulfills its 
mission to assist the states move towards securing the driver's license adjudication and 
issuance processes. Letters and statements authored by Representatives Sensenbrenner and 
Smith regarding the REAL ID Act serve as strong examples that Congress has not forgotten the 
lessons learned from the September 11, 2001 attacks. 

Leading up to the attacks, eighteen of the nineteen September 11**’ hijackers obtained a total of 
more than thirty (30) state driver's licenses and ID cards from states including; Florida, Virginia, 
California and New Jersey. These IDs allowed the terrorists to move freely throughout the 
Eastern United States and facilitated their boarding of commercial airliners which they used as 
weapons against American citizens. In 2004, the National Commission on Terrorist Attacks 
Upon the United States (9/11 Commission) recommended that, "[T]he federal government 
should set standards for the issuance of birth certificates and sources of identification, such as 
driver's licenses." 

The REAL ID Act established these standards by statute. Title II of the REAL ID Act directed DHS 
to establish minimum security standards for state motor vehicle agencies. The Act was quite 
specific and proscriptive, because Congressional analysis had identified the areas in which the 
states' rules were absent or weak with regard to preventing imposters, including foreign 
terrorists, from exploiting those vulnerabilities. In 2008, detailed regulations were issued 
setting standards and benchmarks for issuing driver's licenses. The law is binding only on the 
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federal government. However, states that issue driver’s licenses and IDs which do not meet 
REAL ID's regulatory standards cannot be accepted by federal agencies after certain deadlines. 
Last year, the date on which the federal government can no longer accept for identification 
purposes driver's licenses from non-compliant states was extended by Secretary of Homeland 
Security Janet Napolitano to January 15, 2013. 

All states remain free to issue and to accept non-compliant IDs for state purposes, so long as 
they clearly marked "not for federal identification purposes." 

That's an important distinction because if the state has not held all applicants to the REAL ID 
standard, there needs to be a "buyer beware" warning on the lower class of IDs. It is important 
to distinguish unreliable identity documents issued by the states or other credential issuing 
agencies from those that accurately and completely establish the bearer's true identity. In an 
age of wide spread counterfeiting and fraud, this differentiation should be obvious to everyone, 
but unfortunately opposition to the REAL ID rules demonstrates it is not. 

It is especially important that the Department of Homeland Security continue to make that 
distinction in its rules and regulations, in order to protect the nation's transportation systems 
from terrorists and transnational criminal organizations. 

The Coalition for a Secure Driver’s License strongly concurs with the Bipartisan Policy Center's 
position on the deadline extension. In 2011, the Bipartisan Policy Center issued its Tenth 
Anniversary Report Card on the status of the 9/11 Commission's recommendations. The report 
stated that "the deadlines for compliance have been pushed back twice to May 2011, and a 
recent announcement pushed back compliance again until January 2013. The delay in 
compliance creates vulnerabilities and makes us less safe. No further delay should be 
authorized; rather, compliance should be accelerated." 

The authorities placed with the Department of Homeland Security by PL 109-13 (REAL ID Act) 
regarding the states' issuance of driver's licenses are permanent and continuous. The Act 
established deadlines for state compliance with federal rules pertaining to confirming identity 
of applicants prior to issuance of driver's licenses and state IDs. Because there is no national ID, 
and little interest in establishing a nationai ID, driver's licenses and state issued IDs are the 
default alternative. Hence, improving the reliability of these documents remains a priority for 
the federal government for purposes of homeland security, national security, and fraud 
prevention. Enforcement of REAL ID deadlines pertaining to public use of commercial airlines, 
access to public building have significant security implications and economic effects bearing on 
all levels of government and the private sector. 

Eor law enforcement, most members of Congress, and the public, the issuance of secure 
identification documents including driver's licenses is important for highway safety, for 
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homeland security, and for national security. To this end, CSDL believes several steps could be 
taken to achieve full compliance by a substantial majority of the states. 

Establish an Operational Program Office 

The final rule promulgated by the Department of Homeland Security in 2008 specifically 
addresses the requirements for the states to report their compliance status every three years. 
However, there is no program office established within the department as a point of continuity 
and expertise for driver's license security and communication with the states. 

REAL ID is a program involving all but tbe three or four states that opted out three years ago, 
involving hundreds of millions of dollars in grants, with a complex set of security requirements 
that require interstate and interagency coordination, and the Secretary has never established a 
program office to audit state motor vehicle agency compliance. Surely out of the billions of 
dollars under the DHS’s discretionary control, a couple million can be found to manage this 
critical process. 

The Congress has provided over $220 million in federal grants to the states to comply with REAL 
ID. These grants are supposed to be expended by the states to move toward compliance with 
REAL ID rules, yet the Department of Homeland has not established a program office to 
proactively guide the states with cost effective processes. 

The lack of designated program office may have led to the Department's lack of responsiveness. 
Despite at least five states that have certified their compliance with REAL ID rules, those states 
have received no response from the Department. Those five states have demonstrated that 
REAL ID is doable in the short term and affordable, yet there is little or no communication by 
Homeland Security officials to other states about what needs to be done. 

It is reported that none of the letters sent by the governors in response to the last deadline, 
since extended, have received a response from Secretary Napolitano. States still lack written 
guidance from the department, four years after the final rule. The Department of Homeland 
Security should not continue to keep the states waiting for direction. 

Given the scale of the responsibilities and project schedule, there should be a minimum of five 
Full Time Employees, including a designated office director. The program office costs, including 
travel, can operate for less than $2 million per fiscal year, or about 1% of the federal grants 
already expended for REAL ID compliance. With a committed staff and a modest budget, DHS 
could begin to address directly its responsibilities with the compliant states, which currently 
number over twenty, with another twenty plus to follow. This a fraction of the number of 
personnel at the Department of Transportation devoted to the other driver's license related 
public safety programs. 
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Ideally, the REAL ID Program office would work closely with the Federal Motor Carrier Safety 
Administration (FMCSA), FMCSA already conducts audits of state Commercial Driver's License 
(CDL) issuance and a partnership between FMCSA and the REAL ID program office would allow 
concurrent audits of CDLs and REAL ID compliant driver's license rules. 

The REAL ID program offices should be placed within the National Protection and Programs 
Directorate (NPPD), which contains DHS components who will be essential to the actual 
enforcement of the REAL ID rule. NPPD has a suitable governance culture because the agency 
components are comfortable working with state agencies and the private sector via persuasion 
versus regulatory authority. REAL ID authorities are tied to voluntary compliance by the states, 
which means the program office philosophy will align with "you should" versus "you must." 
NPPD is highly specialized and is managed by an Undersecretary. It contains within it most 
support functions needed by the REAL ID program office going forward. NPPD has 
demonstrated competence managing large programs. REAL ID rules incorporate the need to 
secure large systems and personal information from hacking. This correlates well with the 
NPPD's Office of Cybersecurity and Communications, as well as the Office of Infrastructure 
Protection, NPPD is also a logical agency component for the REAL ID enforcement for access to 
nuclear plants. 

The goal of the National Protection and Programs Directorate is "to advance the Department's 
risk-reduction mission. Reducing risk requires an integrated approach that encompasses both 
physical and virtual threats and their associated human elements." Similarly, REAL ID is a key 
component of the secure identification layer of homeland security. 

Coordination with the Federal Protective Service and the Transportation Security 
Administration on procedures and policies for the deadline of federal enforcement 

The Federal Protective Service would be one of the enforcement arms for the REAL ID mandate 
that access to federal buildings will eventually be restricted only to REAL ID compliant driver's 
licenses and IDs. Clearly, the most important enforcement agency is the Transportation 
Security Administration. 

The recommended REAL ID Program Office could assist with a coordinative outreach to the 
states, ensuring continuity of enforcement at federal facilities, airports, and nuclear power 
plants with the Federal Protective Service and the Transportation Security Administration. 
There are fifty-six (56) jurisdictions that issue driver's licenses and identification cards, so an 
active and effective communication link needs to be established. The Program Office should 
establish a plan to differentiate states that issue compliant driver's licenses and IDs. 
Transportation Security and Federal Protective Service personnel will need to be trained to 
recognize these IDs and take secondary inspection measures to holders of non-REAL ID 
compliant driver's licenses. This would send a strong signal to states that choose not to comply 
or have not made substantial progress that the deadline is eminent. Noncompliant states could 
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then give their residents ample notice to obtain alternative documentation such as a U.S. 
Passport. 

Leverage New Technology at Airports to Facilitate Faster Inspection 

The Transportation Security Administration (TSA) may be able to leverage the Credential 
Authentication Technology/Boarding Pass Scanning System (CAT-BPSS) machines that are 
currently being tested at twenty (20) airports across the country. These machines enable the 
Transportation Security Administration officers to electronically identify fraudulent 
identification documents and boarding passes. TSA and the Department should use this pilot 
phase to include software that distinguishes between compliant and noncompliant driver's 
licenses. As new states begin issuing compliant driver's licenses, the software should be flexible 
to incorporate these upgrades. 


Conclusion 

Compliance with the REAL ID driver's license security standards will finally lead to realizing the 
goal of "one driver, one license". This is the logical extension of the highly successful "one 
driver, one license" for commercial truck drivers that has improved safety on our highways. 
REAL ID promotes safety by denying people who have lost their driver's license in one state 
from simply assuming another identity in another state to get a new driver's license. These 
people are shopping for a new identity because of reckless driving or driving while intoxicated, 
or for vehicular manslaughter, and it's importantto stop them before they kill someone on the 
highway. REAL ID rules require that each applicant fora driver's license or ID card must sign a 
declaration acknowledging that he understands any false statement in his application makes 
him subject to state and federal identity fraud statutes. Officials in states that have put this 
measure in place note that applicants will turn and walk out of DMV offices without signing the 
form, when they are confronted with reality of potential criminal prosecution. REAL ID clearly 
has a deterrent effect on would be fraudsters. 

Thank you for the opportunity to submit this statement for the record. 

The Coalition for a Secure Driver's License (CSDL), www.secure-license. org, is a 501 (c) (3) not 
for profit, crime prevention, educational charity incorporated in Washington, DC. CSDL 
conducts research and provides information that addresses public safety issues, fraud 
prevention benefits of stronger identity authentication procedures, and the issuance of 
counterfeit proof identity documents. CSDL essential research identifies best practices for 
DMVs, fraud detection and prosecution and related identity management topics. CSDL provides 
educational briefings and programs for communities and organizations throughout the United 
States. It is a national organization with over 10,000 members. 

Coalition for a Secure Driver's License 1300 Pennsylvania Avenue NW, Suite 880, Washington D.C. 20004 

Tel: (202) 312-1540 
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Mr. Sensenbrenner. It is now my pleasure to introduce today’s 
witnesses. 

David Heyman is the Assistant Secretary for Policy at the U.S. 
Department of Homeland Security. Previously he served as a Sen- 
ior Fellow and Director of the CSIS Homeland Security Program. 
He is an adjunct professor in security studies at Georgetown. He 
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received his Bachelor’s degree from Brandeis University in 1986 
and his Master of Arts from Johns Hopkins University School of 
Advanced International Studies in 1996. 

Darrell Williams retired last year from the Department of Home- 
land Security after 38 years of Federal Government service. Prior 
to his retirement, Mr. Williams served as Senior Director for the 
DHS Office of State-Issued ID Support, formerly named the REAL 
ID Program Office. Prior to that, he served as the Senior Program 
Manager for the Department of Homeland Security Senior Border 
Initiative Program and Program Director for several U.S. Coast 
Guard command, control, and communications and Department of 
Defense programs. He received his undergraduate degree from 
Wright State University and his Master of Science degree in na- 
tional security strategy from U.S. National War College. He re- 
ceived his Master of Public Administration degree from Central 
Michigan. 

Stewart Baker is a Distinguished Visiting Fellow at the Center 
for Strategic and International Studies. He will shortly return to 
the practice of law at Steptoe & Johnson in Washington. From 
2005 to 2009, he was the First Assistant Secretary for Policy at the 
Department of Homeland Security. Prior to that, he served as Gen- 
eral Counsel of the WMD Commission and the National Security 
Agency. Mr. Baker received his undergraduate degree from Brown 
University and his J.D. from UCLA in 1976. 

David Quam currently serves as Director of the Office of Federal 
Relations at the National Governors Association. Prior to his posi- 
tion at NGA, Mr. Quam was an associate at Powell, Goldstein, 
Frazer and Murphy, LLP. He held various other positions, includ- 
ing Director of International Affairs and General Counsel at the 
International Anti-Counterfeiting Coalition, Inc., and Majority 
Counsel to the Subcommittee on the Constitution, Federalism and 
Property Rights for the U.S. Senate Committee on the Judiciary. 
He received his Bachelor’s degree from Duke and his Juris Doctor 
from Vanderbilt. 

The witnesses’ written statements will be entered into the record 
in their entirety. I ask that they summarize their testimony in 5 
minutes or less. You see the blinking lights in front of you. Yellow 
means wrap it up. Red means time is up. 

So I now recognize Mr. Heyman, and without objection, all of the 
witnesses’ full written statements will appear in the record with 
their testimony. 

TESTIMONY OF DAVID HEYMAN, ASSISTANT SECRETARY, OF- 
FICE OF POLICY, U.S. DEPARTMENT OF HOMELAND SECU- 
RITY 

Mr. Heyman. Thank you, Mr. Chairman, Congressman Scott, 
Chairman Smith, distinguished Members of the Subcommittee. I 
very much appreciate the opportunity to testify before you today 
and to discuss the progress that states have made implementing 
REAL ID and improving the security of driver’s licenses and identi- 
fication documents. 

The Department of Homeland Security is fundamentally a law 
enforcement agency, and law enforcement must be able to rely on 
government-issued IDs and know that the bearer is who he or she 
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claims to be. Fraudulent IDs present opportunities for terrorists, 
and as such, securing IDs is a common sense national security and 
law enforcement imperative, and helps combat identity fraud and 
illegal immigration. 

Since the Act was passed, we have made considerable progress. 
In 2007, DHS published an implementation plan, and in 2008 the 
Department published a final rule establishing minimum standards 
for states and territories. While the Nation’s 56 states and terri- 
tories have principal responsibility for implementing REAL ID, 
DHS has provided tangible support. Since 2007, the Department 
has awarded over $263 million in grants to fund enhancements to 
driver’s license security programs and develop verification capabili- 
ties such as matching lawful status, improving facility security, 
modernization of information technology systems, increasing inter- 
operability, and adding security features to documents. 

Nearly half of this funding has been disbursed to states over the 
past 2 years. The fact that 54 of 56 jurisdictions have applied for 
and used these grant awards indicates that we share the same 
goals, objectives, and even standards for improving security of 
state-issued credentials. 

One of the most challenging aspects of REAL ID is verifying 
source documents. When the bill was passed, those verification ca- 
pabilities did not principally exist, particularly the ability to elec- 
tronically match documents against appropriate Eederal or other 
state databases. Over the past several years, DHS and states have 
collectively built and are building the technical infrastructure and 
systems to support verification of Social Security numbers, birth 
certificates, U.S. passports, and immigration status, all key steps 
toward improving the security of our documents. 

Today I can report that significant progress has been made in 
this regard and in developing verification capabilities to meet the 
verification requirements, with all but one verification capability 
operational or in pilot testing today. 

The Department’s efforts extend beyond financial support. DHS 
has issued guidance documents and engaged stakeholders to en- 
sure their concerns are being heard and challenges are being ad- 
dressed. In 2009, DHS issued two guidance documents to assist 
states in understanding and meeting the REAL ID security stand- 
ards, one on marked guidelines and another on best practices for 
security facilities and plans, card design, privacy and personnel se- 
curity. 

It was apparent from conversations with the states that addi- 
tional clarification is warranted, and we will, in fact, be issuing ad- 
ditional guidance soon. This additional guidance will help reduce 
uncertainty regarding compliance by describing comparable pro- 
grams that meet minimum standards, and this will help encourage 
states to submit information on their progress. 

Additionally, our program office for this program has conducted 
considerable outreach through participation and meetings with 
states, territories, and partnering with Eederal organizations. The 
office has conducted outreach to stakeholders, as well as attended 
a wide range of conferences, even visiting 44 of 56 states and terri- 
tories and working extensively with the American Association of 
Motor Vehicle Administrators. 
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Perhaps the greatest success of REAL ID has been the security 
of driver’s licenses has been improved in all states, even in the 13 
states with legislation prohibiting REAL ID. The deadline for 
REAL ID is January 15th, 2013. Our goal is to get this done, and 
states have made significant progress in meeting the minimum se- 
curity standards. All 56 states and territories have submitted docu- 
mentation regarding their status with respect to material compli- 
ance benchmarks of REAL ID. They have made significant progress 
in meeting the benchmarks and other requirements, and most are 
meeting facility production issuance and card standards. 

When determining whether a state has implemented a secure 
driver’s license program, DHS will base its decision on the totality 
of what states have done. We commend them for their efforts. We 
have shared goals, and that is evident from the progress being 
made. 

Thank you again for the opportunity to speak to you today, and 
I’m happy to answer your questions. 

[The prepared statement of Mr. Heyman follows:] 

Prepared Statement of David Heyman, Assistant Seeretary, 

Offiee of Poliey, U.S. Department of Homeland Seeurity 

Chairman Sensenbrenner, Representative Scott, and Members of the Sub- 
committee: Thank you for your leadership on homeland security issues, and thank 
you for holding this important hearing today so that the Department of Homeland 
Security (DHS) can provide you with an update on the progress the states have 
made implementing the REAL ID Act of 2005, Title H of division B of Pub. L. 109- 
13 (“REAL ID Act” or “Act”). We welcome the opportunity to submit this testimony 
on how the state, territory, and federal partners have improved the security of driv- 
er’s licenses and identification documents. 

Over the last two Administrations, we have worked to implement the REAL ID 
Act of 2005. States have the principal responsibility for implementing REAL ID. 
DHS developed an Implementation Plan in June 2007 and published a Final Rule 
in January 2008, which provided states and territories with information on the min- 
imum requirements that must be met and the funding available to help meet those 
requirements. Since then, DHS awarded over $200 million in grants to states and 
territories to fund enhancements to driver’s license security programs. Additionally, 
DHS has issued guidance documents and engaged stakeholders to ensure their con- 
cerns were heard. DHS, the states, and the territories have collectively built or are 
building the technical infrastructure and systems to support verification of social se- 
curity numbers, birth certificates, U.S. passports, and immigration status — key 
steps toward improving the security of our documents. Perhaps the greatest success 
of REAL ID has been that the security of driver’s licenses has been improved in 
ALL states, even in the 13 states with legislation prohibiting their participation in 
REAL ID. Diligent outreach and work with states by DHS has 3 delded real benefits 
in the last several years. 

In my testimony, I will elaborate on the progress but first it is important to pro- 
vide the background to how we got to where we are today. 

WHY WE NEED SECURE IDENTIFICATION DOCUMENTS 

Law enforcement must be able to rely on government-issued identification docu- 
ments and know that the bearer of such a document is who he or she claims to be. 
Obtaining fraudulent identification documents presents an opportunity for terrorists 
to board airplanes, rent cars, open bank accounts, or conduct other activities with- 
out being detected. According to the 9/11 Commission Report, “All but one of the 
9/11 hijackers acquired some form of U.S. identification document, some by fraud.” ^ 


^The 9111 Commission Report: Final Report of the National Commission on Terrorist Attacks 
upon the United States, at 390 (2004). 
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We recognize that preventing terrorists from obtaining these documents is critical. 
As the 9/11 Commission noted, “For terrorists, travel documents are as important 
as weapons.” 2 

The 9/11 Commission recommended that the federal government work with other 
layers of government to solidify the security of government-issued IDs. While im- 
proving government-issued IDs alone will not thwart every planned terrorist attack, 
it does present an important obstacle to any potential terrorist operating in the 
United States and could aid law enforcement in stopping terrorist plots. Securing 
IDs is a common-sense national security and law enforcement imperative, which 
also helps to combat identity fraud and illegal immigration. The 9/11 Commission 
spelled out the need for the federal government and the state or territory ^ to take 
action together on this issue and together we have made considerable progress. 

PASSAGE OF THE REAL ID ACT OF 2006 

In May 2005, Congress enacted the REAL ID Act of 2005 in response to the 9/ 
11 Commission’s recommendations for more secure standards for identification. The 
Act included the following provisions: 

• Prohibits Federal agencies from accepting driver’s licenses or identification 
cards unless the Department determines that the state or territory meets 
minimum security requirements. 

• Establishes minimum standards for the: 

o Information and features that appear on the face of the card; 

o Physical security of cards to prevent tampering, counterfeiting, and dupli- 
cation of the documents for a fraudulent purpose; 

o Presentation and verification of source documents, including presentation 
and verification of documents evidencing citizenship or lawful status; and 

o Physical security of production and storage facilities and for materials from 
which REAL ID cards are produced. 

• Authorizes the Department of Homeland Security to make grants to states 
and territories to assist in conforming to the minimum standards of the Act. 

In June 2007, DHS submitted, and the Senate and House Appropriations Commit- 
tees subsequently approved, the REAL ID Implementation Plan. In the REAL ID 
Implementation Plan, DHS outlined its plans to make grant funds available specifi- 
cally for projects that addressed the following areas: 

• Enhancements to existing communications and verification systems to sup- 
port cost effective electronic verification of source documents. 

• Development of a secure indexing or pointer system for verification that an 
individual does not hold multiple licenses in multiple states or territories. 

• Development of a cost effective capability for verification of lawful status. Im- 
provements to the infrastructure to support electronic verification of birth cer- 
tificates. 

• Model privacy standards, security practices, and business rules regarding 
verification of applicant information with Federal and state agencies. 

Additionally, in January 2008, the Department published the REAL ID regulation 
{“Minimum Standards for Driver’s Licenses and Identifieation Cards Aceeptable by 
Federal Agencies for Offieial Purposes” (6 C.F.R. part 37)) providing greater detail 
on the minimum requirements states and territories must satisfy to be in compli- 
ance with the Act. 

When determining whether a state has implemented a secure driver’s license pro- 
gram, DHS will base its decision on what states have done to meet the requirements 
of the regulation. The security benchmarks in the regulation focus on: identity as- 
surance procedures; license information and security features; secure business proc- 
esses; employee training and background checks; and privacy protections. They also 
address the primary sources of fraud in the issuance and use of driver’s licenses and 
identification cards. 


^The 9/11 Commission Report: Final Report of the National Commission on Terrorist Attacks 
upon the United States, at 384 (2004). 

3 States and territories is used to refer to all fifty-six jurisdictions covered by the REAL ID 
Act, to include the fifty states, the District of Columbia, Puerto Rico, the Virgin Islands, Guam, 
American Samoa, and the Commonwealth of the Northern Marianas Islands. 
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DHS FUNDING TO SUPPORT EFFORTS TO MEET THE SECURITY STANDARDS 
OF THE REAL ID ACT 

Since FY 2006, the Department has obligated a total of $273 million in REAL ID 
program funds to support states and territories in their efforts to meet the require- 
ments of the REAL ID Act. 

From FY 2006 through FY 2011, FEMA awarded approximately $200 million in 
grants to 54 states and territories to fund individual projects to improve the security 
of their credentials, facilities, systems, and business processes commensurate with 
the standards of the REAL ID Act. States and territories have been able to allocate 
these funds based on individual needs, priorities, and operations. 

States and territories have used these awards to meet the material compliance 
security benchmarks and other REAL ID standards, including: 

• Adding tamper resistant or enhanced security features to their documents. 

• Modifying their facilities to limit access to sensitive materials and card pro- 
duction areas. 

• Modernizing information technology systems to promote interoperability. 

• Conducting fraudulent document training or re-engineering the driver’s li- 
cense issuance process to reduce customer wait times. 

• Implementing verification of lawful status. 

• Improving their ability to protect applicants’ personal information. 

For example, using REAL ID FY 2008 Demonstration Grant funds, the State of 
New York purchased facial recognition software to detect individuals holding mul- 
tiple drivers’ licenses, sometimes in an attempt to evade law enforcement detection. 
New York used facial recognition technology to review the records of 600,000 holders 
of New York State Commercial Driver Licenses (CDLs). The results of this effort 
led to the arrest of more than 50 commercial drivers for fraudulently obtaining mul- 
tiple driver licenses using an alias. Since February 2010, 800 people have been ar- 
rested for having two or more licenses under different aliases. 

From FY 2008 through FY 2011, FEMA also awarded approximately $63 million 
in targeted grants to five states, Mississippi, Kentucky, Indiana, Florida, and Ne- 
vada, which volunteered to upgrade existing communications and verification infra- 
structure needed by all states and territories to meet the requirements of the REAL 
ID Act. 

• The following verification capabilities to meet the verification requirements of 
the REAL ID regulation are either operational or in pilot testing. Specifically: 

o The states have upgraded the infrastructure necessary to support DMV 
verification of birth certificates. Birth records from 38 state Vital Records 
Agencies are now available for electronic verification; 

o Fifty states and the District of Columbia are verifying social security num- 
bers; 

o Forty-seven states and territories have signed an agreement with USCIS 
to verify lawful status through the SAVE program; and 

o Four states are piloting verification of U.S. passports and this capability 
will be available to all states later this calendar year. 

• Driver Licensing Agencies (DLAs) have used, and are continuing to use, re- 
maining Driver’s License Security Grant awards to fund the local information 
technology and business process improvements needed to connect to and use 
these systems. 

Additionally, USCIS has supported almost $10 million in projects for the develop- 
ment and deployment of cost-effective methods that states and territories can use 
to verify lawful status, U.S. passports, and social security numbers. USCIS has 
worked together with the states and territories in the development, testing, and de- 
ployment of these capabilities. 

FACILITATING CONFORMITY WITH THE STANDARDS OF THE REAL ID ACT — 
GUIDANCE AND OUTREACH FOR THE STATES AND TERRITORIES 

The Department’s efforts extend far beyond providing financial assistance to 
states and territories. DHS has been working with states and territories to assist 
them in understanding and meeting the security standards of the REAL ID Act. In 
2008 and 2009, DHS issued two guidance documents for that purpose: 
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• REAL ID Mark Guidelines (October 2008), providing DHS recommendations 
for the marking of licenses. 

• REAL, ID Security Plan Guidance Handbook (February 2009), providing best 
practices for: securing facilities where enrollment, production, and/or issuance 
of REAL ID driver’s licenses and identification cards occur; card design and 
security; privacy; personnel security, and the contents of the security plans. 

Because of additional requests from the states for clarification, the Department 
plans to issue additional guidance in the near future to clarify the minimum stand- 
ards that states and territories must meet to achieve full compliance with the Act 
and provide examples of how states can meet them. While DHS has worked closely 
with many individual states and territories — some of which already submitted full 
compliance packages — the Department believes that the guidance will reduce the 
uncertainty surrounding the regulation and encourage states and territories to sub- 
mit information on their progress consistent with the minimum standards of the 
REAL ID Act. In providing further guidance, DHS’s purpose is to afford every state 
and territory the flexibility and opportunity to reach full compliance in a practical 
manner. 

DHS’s subject matter experts have worked with the states and territories contin- 
ually since 2007. Through its participation in meetings with the states, territories, 
partnering federal organizations, and stakeholders as well as attendance at a wide 
range of conferences, our program office, the Office of State-Issued Identity Support 
(OSIIS), visited 44 of 56 states and territories covered by the REAL ID Act, includ- 
ing four of the five U.S. territories. DHS continues to work closely with the Depart- 
ment of State on the passport verification module. DHS has worked with the Amer- 
ican Association of Motor Vehicle Administrators (AAMVA) to coordinate implemen- 
tation of the standards of the REAL ID regulation. In particular, DHS participated 
with the states and territories in the drafting of the Personal Identification — 
AAMVA North American Standard — DLHD Card Design to ensure that states and 
territories can implement the REAL ID requirements for card design by means of 
common, consensus-based data formats and card technologies endorsed by all states 
and territories. 

Since 2007, OSIIS has also participated in at least 40 meetings with AAMVA and 
member states regarding all aspects of the REAL ID program, and provides regular 
briefings at the semiannual AAMVA Board of Directors Meetings and regional meet- 
ings. OSIIS representatives have also attended annual meetings of National Asso- 
ciation for Public Health Statistics and Information Systems since 2007. The pro- 
gram communicates regularly with the Coalition for A Secure Driver’s License. 
OSIIS has also participated in a dozen on-site meeting with the State of Mississippi 
and the Mississippi consortium of states leading state efforts to improve the commu- 
nications system infrastructure supporting the verification requirements of the Act. 

Thirteen states have laws prohibiting compliance with the REAL ID Act. Even 
so, DHS believes that some of these states already issue secure identification docu- 
ments consistent with the standards of the regulation. 

It is important to note that the REAL ID regulation provides DHS with the ability 
to recognize comparable programs in states and territories that issue driver’s li- 
censes and ID cards consistent with the minimum requirements of the regulation. 
States and territories are, in fact, already achieving success with their comparable 
efforts. 

For example, four states (Michigan, New York, Vermont, and Washington) cur- 
rently issue Enhanced Driver’s Licenses and Enhanced Identification Documents 
(EDLs) that were developed in alignment with the REAL ID standards, but can also 
be used by U.S. citizens as a border crossing document to enter the United States 
through a land or sea port of entry in accordance with the Western Hemisphere 
Travel Initiative (WHTI). 


APPROACHING DEADLINE 

The deadline for meeting the standards of the REAL ID Act is January 15, 2013. 
To assist DHS in making compliance determinations, the regulation also requires 
states and territories to submit certification materials at least 90 days prior to the 
effective date of compliance. A DHS compliance determination means that a state’s 
or territory’s program meets or exceeds the REAL ID regulatory requirements or 
has a program comparable to the requirements of the REAL ID regulation. 


'I Alaska, Arizona, Idaho, Louisiana, Maine, Minnesota, Missouri, Montana, New Hampshire, 
Oklahoma, Oregon, South Carolina, and Washington. 
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CONCLUSION 

This hearing seeks to take stock of implementation of the REAL ID Act of 2005. 
DHS relies on alternative data collection methods, such as grant reporting, to docu- 
ment progress made by states and territories in improving the security of their driv- 
er’s licenses and identification cards commensurate with the standards of the REAL 
ID Act. While this does not afford DHS full visibility into all the progress states 
have made, we can say that the Department, along with our federal, state and terri- 
tory partners, has made great strides in improving the security of credentials since 
9/11 and the subsequent enactment of the REAL ID Act of 2005. States and terri- 
tories have made significant progress in meeting the benchmarks and other require- 
ments of the REAL ID regulation and most are meeting REAL ID facility, produc- 
tion, issuance, and card standards. We commend them for their efforts. 

Thank you again for this opportunity to testify. I am happy to answer any ques- 
tions you may have. 


Mr. Sensenbrenner. Thank you very much. 

Mr. Williams? 

TESTIMONY OF DARRELL WILLIAMS, FORMER SENIOR DIREC- 
TOR, OFFICE OF STATE-ISSUED ID SUPPORT, U.S. DEPART- 
MENT OF HOMELAND SECURITY 

Mr. Williams. Mr. Chairman and Ranking Member, and distin- 
guished Members of the Subcommittee, thanks for the invitation to 
actually speak. 

From 2006 until when I retired in 2011, I was the Director for 
the REAL ID program. Pretty much all the documents, the concept 
of operations, implementation plans, the expenditure plans I pretty 
much developed with my staff. All the staff that is currently in the 
office I actually selected. 

In regards to the implementation of REAL ID, which is what I 
will focus on, we actually established an outreach program which 
included all 56 states and territories in regards to our attempts to, 
first of all, help them understand what REAL ID is and does, but 
also to take a look at the implementation activities associated with 
REAL ID so they could actually get better cost estimates as they 
looked forward to attempting to implement the program. 

A lot of the successes that REAL ID has actually come to know 
really came from the states leaning forward not so much because 
of what DHS did but because the states realized long before 9/11 
that there was a number of fallacies within their processes in re- 
gards to security dilemmas in their facilities, and then they also re- 
alized that a lot of the security issues associated with producing a 
driver’s license actually came from internal processes where their 
individuals created a lot of the internal fraud. 

So again, those are things that states realized, states wanted to 
do, and then REAL ID actually became the overall umbrella to help 
states implement the kinds of things they wanted to do and actu- 
ally start off with. 

The progress that states have made has been well documented. 
Eor example, if you take a look at states, and we actually did a 
state survey where a number of states responded, 82 percent of 
states have improved their card security. All those security im- 
provements are really consistent with REAL ID. There are a num- 
ber of other stats that I have in my testimony that I won’t review 
now. But again, it shows again the tremendous progress that states 
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have made and that states are committed to improving their secu- 
rity and the integrity and the trustworthiness of their documents. 

One of the things that has prohibited states from making more 
progress is states need clear and consistent guidance. That is the 
one thing that they have not received. For example, with the PASS 
ID dilemma, states became confused as to whether or not DHS was 
going to implement REAL ID or replace it at some point in time 
with PASS ID. In that confusion, states decided to stop using some 
of the grant funding to improve the security of their systems. That 
took, in some cases, anywhere from 12 to 18 months longer. 

The other example is we talk about the verification capabilities 
that states will need to use to verify whether or not a person is 
issued a driver’s license in another state. That system, which I 
really started to develop back in the 2007 timeframe, with the ad- 
vent of the PASS ID confusion, that progress was also delayed. So 
that IT system that is not in progress today could have been 
furthered if states weren’t in that confused state waiting for DHS 
to provide clear and consistent guidance. 

The other guidance that states aren’t totally sure of is when 
states take a look at the REAL ID Act and what it requires, it does 
not provide clear pass/fail guidance as to what states need to evalu- 
ate their facilities, their people, and their processes to clearly de- 
termine whether or not they meet the requirements of the REAL 
ID Act. DHS also does not have that pass/fail criteria. 

So when we talk about compliance audits at some point in time 
in the future, without that clear pass/fail criteria, DHS would not 
be capable of actually rendering and determining whether or not a 
state actually meets the requirements of the Act itself. 

There is more to say, and I will save much for the questions so 
I can stay within the 5 minutes. But again, thanks for the invita- 
tion to speak, and I look forward to your questions. 

[The prepared statement of Mr. Williams follows:] 

Prepared Statement of Darrell Williams, former Senior Director, Office of 
State-Issued ID Support, U.S. Department of Homeland Security 

Chairman Smith, Ranking Member Conyers, and distinguished members of this 
Subcommittee I am pleased to be here today to discuss the importance of the REAL 
ID Act’s Minimum Standards for Driver’s Licenses and Identification Cards. 

From December 2006 until 1 April 2011 I served as the Director for the Depart- 
ment of Homeland Security (DHS) REAL ID Program Office, later renamed the Of- 
fice of State-Issued ID Support. During my tenure, I established the REAL ID Pro- 
gram Office, planned and executed the program’s budget and selected each member 
of the REAL ID program office team. In addition, I lead the development the of 
REAL ID Reflation, REAL ID Program’s Concept of Operations, and the REAL ID 
Implementation and Expenditure Plans which were both approved by DHS and sub- 
mitted to Congress. I specifically communicated the program’s requirements, imple- 
mentation progress and expenditures to DHS executive leadership, Office of Man- 
agement and Budget and Congress. I also worked with other Federal agencies and 
developed an outreach program designed to establish and maintain a long-term 
partnership with all U.S. States and territories Department of Motor Vehicle (DMV) 
leadership, the American Association of Motor Vehicle Administrators (AAMVA) and 
specific document identity data verification system managers. My goal was simply 
to assist states to enhance the security, integrity and trustworthiness of their driver 
licenses and identification cards, facilities and processes to comply with the require- 
ments of the REAL ID Act and implementing regulation. 

A brief synopsis of the primary requirements are located in Section 202 of the 
REAL ID Act which reads, “Prohibits Federal agencies from accepting State issued 
driver’s licenses or identification cards unless such documents are determined by 
the Secretary to meet minimum security requirements, including the incorporation 
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of specified data, a common machine-readable technology, and certain anti-fraud se- 
curity features. In addition, Section 202 also sets forth minimum issuance standards 
for such documents that require: (1) verification of presented information; (2) evi- 
dence that the applicant is lawfully present in the United States; (3) issuance of 
temporary driver’s licenses or identification cards to persons temporarily present 
that are valid only for their period of authorized stay (or for one year where the 
period of stay is indefinite); (4) a clear indication that such documents may not be 
accepted for Federal purposes where minimum issuance standards are not met; and 
(5) electronic access by all other States to the issuing State’s motor vehicle data- 
base.” 

Prior to managing the REAL ID program, I served as the Senior Program Man- 
ager for the DHS’s Secure Border Initiative Program, several U.S. Coast Guard 
Command, Control and Communications programs and numerous Department of 
Defense major weapon system acquisition and support programs. Lastly, among 
other degree’s, I have a MS Degree in National Security Strategy from The National 
War College. 

Although I am be delighted to discuss or address any questions the Committee 
may have regarding the REAL ID Act or Regulation, I will focus my written testi- 
mony and opening remarks on the program’s implementation activities. 

Under my direction the REAL ID Program Office, later renamed the Office of 
State Issued Identification Support, was responsible for REAL ID program develop- 
ment, REAL ID Rule development, REAL ID related grant oversight, development 
of an identity documentation electronic verification capability and implementation 
of the REAL ID Act. The regulatory scope of the REAL ID Act and regulation in- 
clude the following: 

• Approximately 240 million holders of State driver’s licenses and identification 
cards 

• 56 jurisdictions, including the 50 States, the District of Columbia, and five 
U.S. territories 

• Approximately 2,200 State DMV offices and facilities employing about 30,000 
state employees and contractors 

• Millions of commercial airlines travelers and visitors to the Federal facilities 

• Multiple Federal agencies to include Department of Transportation, the 
Transportation Security Administration (TSA), Federal Protective Service 
(FPS), the Nuclear Regulatory Commission (NRC), and other Federal entities 
managing access to Federal facilities. 

In December 2006 one of the most formidable REAL ID challenges facing DHS 
was direct opposition by the states and specifically each state’s DMV Offices. During 
this time frame, the states DMV administrators collectively considered DHS an ab- 
solute adversary and as result the few discussions that occurred between represent- 
atives from the state DMV offices and DHS were quite contentious and non-produc- 
tive. However, I’m delighted to report that upon my retirement in 2011, numerous 
DMV staff members and specifically DMV administrators from across the country 
and the U.S. territories emailed, phoned and sent letters to thank me for my efforts 
that led to establishing and maintaining an open and honest REAL ID implementa- 
tion partnership. 

The benefits of this partnership which began in the spring of 2007 eventually re- 
sulted in the DMV administrators teaming with AAMVA to become the REAL ID 
Program Office’s most supportive implementation advocate. The implementation 
success that will be discussed later in this testimony would have not been realized 
without the DMV administrators and AAMVA support. 

An example of this support was first realized in the spring and summer of 2007, 
when AAMVA agreed to host four regional meetings in the cites of Baltimore, Chi- 
cago, Los Angeles and Atlanta which allowed me to conduct 4 four hour meeting 
with all the DMV staff members in each region to discuss DHS plans regarding the 
proposed REAL ID rule and address the numerous misconceptions, false information 
and reduce the DMVs fear of this unknown rule’s impact on how they conduct their 
day to day business with their respective customers. 

In addition to support, AAMVA and the state DMV’s funded their personnel ex- 
penses to attend and participate in these meetings. These meetings resulted in a 
tremendous amount of clarity for the states. This initial series of regional meetings 
reduced the state’s high anxiety by clarifying the rules intensions, removing misin- 
formation and asking the states to share their operational insight. 

While at these meetings I also conducted several side-bar meetings with DMV re- 
gional leaders. From the follow-on side bar meetings I recruited numerous state 
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DMV staff members to partner with DHS to form several working groups. Early in 
2007, I realize that I did not have the program funding or adequately trained staff 
to properly understand all the relevant operational aspects of the state DMV driv- 
er’s license issuance processes, facilities and IT capabilities. To quickly acquire the 
technical expertise needed, I partnered with the DMV leadership to develop several 
DMV process-focused technical working groups comprised primarily with the DMV 
and AAMVA staff members. AAMVA agreed to host the working group meetings. 
Without belaboring the point, I bring this information forward to stress that vir- 
tually all the implementation progress made to date has been greatly facilitated 
with state DMVs and AAMVA technical, administrative assistance and in some 
cases financial support. 

States have been fully engaged in improving the security, integrity and trust wor- 
thiness of their respective state issued driver’s license and identify cards. Many of 
these security improvements either exactly meet or are consistent with the require- 
ments of the REAL id Act or Rule. States have made these improvements primarily 
because they were well aware prior to September 2011 that their driver’s license 
and identity card issuance processes, cards and facilities had numerous security de- 
ficiencies. In addition, states have long wanted to develop a capability that allows 
each state’s DMV to electronically verify all applicant’s identity documents (birth 
record, passport, out-of-state’s driver’s license, immigration documents) information 
prior to issuing a driver’s license or identity card. 

States have and continue to make significant implementation progress consistent 
with requirements of REAL ID. A February 2011 Driver’s Information Verification 
System (DIVS) report shows the results of a state-based questionnaire where states 
self-report their driver’s license and identity card security progress as follows: 

• 82% of states have improved their card security 

• 96% of states provide fraudulent document security recognition training 

• 89% of states perform background checks on employees 

• 78% of driver’s license agencies have improved the physical security of their 
facilities 

• 96% of states have instituted IT hardware and software that links a given 
license issuer with a given issued license 

• 71% of states access USCIS data to verify U.S. issued immigration docu- 
mentation 

• 84% of states coordinate driver’s license and identity document expiration 
date to an applicant’s U.S.-issued immigration documentation. 

The above DIVS report indicates the ^eat progress states have made absent clear 
and consistent DHS guidance. DHS vacillation on support of PASS ID vs. REAL ID 
temporarily delayed numerous states from making progress and resulted in an un- 
timely delay in states utilizing their grant funding to make security improvements. 
In 2010, numerous states expressed concern that if they continued to expend their 
2008 and 2009 grant funds to comply with REALID requirements, those funds 
would not be available if the requirements were changed to align with PASS ID. 
In absence of clear and consistent guidance, numerous states delayed grant fund ex- 
penditures and thus REAL ID implementation enhancements. States remain un- 
clear if DHS will, yet again, postpone the compliance deadline beyond January 2013, 
continue to pursue PASS ID or another alternative, or if they should march full 
speed ahead to continue to improve and enhance their driver’s license and identity 
card issuance processes to become comparable to or consistent with REAL ID re- 
quirements. 

In addition, states continue to express concern about REAL ID Rule Subpart 
E.37.51 that says “States must have met the REAL ID Rule standards of subparts 
A through D or have a REAL ID program that DHS has determined to be com- 
parable to the standards of subparts A through D.” To date, DHS has not provided 
states clear guidance on what constitutes comparable and must do so as soon as pos- 
sible to allow states time, if they so elect, to pursue a comparable alternative lead 
time away from the established compliance deadline of January 15, 2013. 

In addition to the above, below you will find a list several other implementation 
issues that should be resolved as soon as possible to provide all willing states a real- 
istic opportunity to achieve a successful REAL ID program implementation. 

• DHS must establish clear pass/fail criteria that states can use to measure and 
determine when they comply with the REAL ID or comparable program com- 
pliance requirements. 
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o Until such clear guidance is provided, states do not have the ability to de- 
termine if they have met all the requirements for compliance. 

o In addition, DHS will need the pass/fail criteria to perform future compli- 
ance audits 

• Per REAL ID rule section 37.55, 37.59 and 37.61, DHS must establish a state 
compliance audit process to conduct future compliance audits. A compliance 
audit process is required to verify if a state has met or is meeting the re- 
quired initial or recertification compliance requirements per the REAL ID 
rule. 

o Subpart E — Procedures for Determining State Compliance, section 37.55 
indicates that DHS will make a final compliance determination. Subpart 
E — Procedures for Determining State Compliance, section 37.59 indicates 
that DHS will review to determine whether the state meets the require- 
ments for compliance. 

• DHS must develop a REALID enforcement strategy that clearly conveys how 
the REAL ID Act requirements will be enforced beginning January 15, 2013. 

o Enforcement strategy must include at minimum the Federal Protective 
Service, Transportation Security Agency and other Federal facilities as cov- 
ered by the REAL ID Act and implementing regulation. 

• DHS must develop a grant funding financial audit review strategy to ensure 
the grant funds awarded to states are being expended in accordance with the 
grant application and approval. 

o Currently, DHS lacks the process to know and ensure accountability for 
REAL ID grant funds expenditures 

• To vastly improve the quality of program implementation, strongly encourage 
the REAL ID program be transitioned to an operational environment that has 
acquisition, program management, system engineering, at a minimum, as 
core competencies. Although the DHS Office of Policy may be well intended, 
the office is not equipped with the experience or expertise to oversee the de- 
sign and development of an operational program. The Office of Policy is espe- 
cially not capable and does not have the expertise to oversee the design, test, 
implementation an initial operation of the multi-million dollar REAL ID Driv- 
er’s License Information and Verification (DIVS) Program which is currently 
in the design phase. This REAL ID electronic document verification program, 
developed with Congressional appropriated funds, is currently in the design 
phase. The REAL ID program has been in the implementation and system de- 
velopment stage for several years. For example, for past three years the Of- 
fice of Policy has overseen and managed the requirements generation process, 
which will lead to the design, development, testing and fielding of an oper- 
ational IT system expected to process millions of daily state to state DMV 
transactions. The DIVS system is expected to complete the design phase in 
2014, testing in 2015 and become operational and deployed by 2016. Just as 
policy should not be developed in an operational environment, an IT focused 
system’s design, development, test, initial operation and full system deploy- 
ment should not be led by a Policy Office. 

• REAL id’s Greatest implementation assets: 

o All DMV leadership is aware of the critical need to improve the security, 
integrity and trust worthiness of their driver’s license and identity card 
processes and they are willing to take action. 

o State’s continue to make significant progress to enhance the security of 
their cards, systems, processes and facilities 

• REAL id’s Greatest implementation impediments: 

o Retaining the design, development, testing and fielding of an operational 
program in a Policy making environment will continue to delay the pro- 
gram’s implementation. The program must be transitioned to an oper- 
ational environment. 

o Lack of DHS clear and consistent guidance to states. 

• The program lacks clear pass/fail compliance criteria 

• The program lacks clear guidance on what constitutes a comparable pro- 
gram 
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• The program lacks clear guidance on how enforcement will be imple- 
mented and if enforcement will begin January 16, 2013 

o Lack of DHS executive level engagement and support 

• States DMV leadership remain uncertain and unconvinced that DHS ex- 
ecutive leadership is committed to REAL ID implementation 


Mr. Sensenbrenner. Thank you, Mr. Williams. 

Mr. Baker? 

TESTIMONY OF STEWART A. BAKER, PARTNER, 
STEPTOE & JOHNSON, LLP 

Mr. Baker. Chairman Sensenbrenner, Ranking Member Scott, 
Chairman Smith, Chairman Emeritus Conyers, Members of the 
Committee, it is a pleasure to be here. My claim to fame is I hired 
Darrell and had David Heyman’s job before he had it. 

It is a pleasure to talk about this topic because it is so important. 
It is not just that the 9/11 Commission after 10 years reiterated 
how important it was. It is not just that practically every terrorist 
act in the last 20 years, from Oklahoma City to 9/11 to the Lub- 
bock, Texas attacks, depended on fake and fraudulent IDs. But one 
person, one household in 14 every year is the subject of identity 
theft. Most of it, the most serious of it is facilitated by fake IDs. 
This is the real privacy issue that we should be focused on. People 
are losing control of their identities to people who have easy access 
to fake or fraudulent driver’s licenses. 

The good news that I do want to talk about is that most states 
have, at the end of the day, as we have heard already, recognized 
they have a responsibility to fix their security problems, and nearly 
40 of them could meet this deadline, or perhaps more. They are on 
track to meet the deadline. That is great news. It is particularly 
impressive that they have put in place the ability to check birth 
certificates, which are really the most dangerous breeder document 
that facilitates this kind of fraud. That is possible by January of 
2013. 

The bad news from my point of view is that even if 80 or 90 per- 
cent of the states meet this deadline, they are not going to get rid 
of 80 or 90 percent of the fraud. They are going to get rid of about 
10 percent of the fraud because the fraudsters and the terrorists, 
everybody who wants a fake ID, are just going to figure out which 
states allow them still to use bad birth certificates or to meet other 
fraudulent requirements, and they are going to go there. 

So until we get everybody up to a high level, we are not going 
to solve this problem. That is why, I think, the REAL ID Act very 
wisely put in place a penalty for failure to meet this deadline. Until 
the last state comes on board, we have a problem in our ID system. 

The difficulty with the penalty that we have, and I faced this be- 
cause I actually was facing the prospect of pulling the trigger on 
the refusal to accept licenses at airports, is it is like a nuclear 
weapon. It is really effective at scaring people, but when you actu- 
ally set it off, a lot of bad things happen that no one really wants 
to see happen. 

So there is a kind of chicken that is played between the Depart- 
ment and the states. The states say, “I wonder if they will really 
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set that off, because if they won’t, maybe I can just, you know, 
skate past the deadline.” And the Department doesn’t want to set 
it off, but they have to persuade people that they are actually going 
to do something serious when the deadline arrives. I don’t think 
David or the Administration has persuaded anybody that they are 
serious about setting off that weapon or imposing that penalty. 

So my suggestion for this committee is you really need to find 
some penalty to enforce that deadline that is not dependent on the 
Secretary having the will to use that penalty, and my suggestion 
in the testimony — I will stop here — is that you say to the 54 or 56 
jurisdictions who took money to comply with REAL ID that if you 
don’t meet January 2013, give the money back. Thanks. 

[The prepared statement of Mr. Baker follows:] 

Prepared Statement of Stewart A. Baker, Partner, Steptoe & Johnson LLP 

Chairman Sensenbrenner, Ranking Member Scott, Members of the Subcommittee, 
I am pleased to testify today about the importance of improving the security of driv- 
ers’ licenses, the identity documents on whose security Americans rely daily. 

WHY WE NEED MORE SECURE DRIVERS’ LICENSES 

It shouldn’t be necessary to say that we need secure identification documents in 
the United States. Ten years ago, the 9/11 hijackers exploited the security weak- 
nesses of state DMVs to obtain nearly 30 licenses, many of them by fraud. And 
twenty years ago, Timothy McVeigh used a fake South Dakota license to rent the 
truck he filled with fertilizer and fuel oil; South Dakota’s license security was so 
weak that McVeigh made his fake license with a typewriter and a clothes iron. 

That’s not the end of it. Last year, the FBI arrested a Saudi student in Texas 
whose notes showed that he had devoted much of his young life to winning a schol- 
arship to the United States, where he planned emulate Osama bin Laden by killing 
large numbers of Americans. His plans included casing the home of George W. Bush 
and preparing a chronology for the attacks listing these key steps in his plan: “ob- 
taining a forged US birtb certificate, applying for a US passport and driver’s li- 
cense; . . . using a different drivers’ license for each car he rents; . . . putting the 
bombs into the cars and taking them to different places during rush hour.” 

Some things never change. Terrorists hoping to attack us at home will keep ex- 
ploiting the insecurity of our drivers’ license system for as long as we fail to improve 
that system. 

So will criminals. Identity theft is a fast-growing and disturbingly common crime; 
one household in 14 suffered an identity theft in 2010, according to the U.S. Justice 
Department, up from one in 18 just five years earlier. Some of the most intrusive 
and devastating forms of identity theft — forged checks, for example, or employment 
fraud — require a fraudulent drivers’ license or similar identification document to ac- 
complish. Bad drivers’ license security has victimized millions of Americans. 

It could even get some of them killed. I am still appalled by the story of Kevin 
Wehner. Having his wallet stolen on vacation was the beginning a nightmare. The 
thief used Wehner’s documents, along with a forged Virgin Islands birth certificate, 
to obtain a Florida license in Wehner’s name. When Wehner moved to Florida, the 
DMV refused to give him a license. “You’ve already got one,” they told him. He sent 
them his picture to straighten out the mess. That only made things worse. Because 
the identity thief had moved on to stealing cars and killing police officers. To catch 
the killer, Florida police circulated the photo that the real Kevin Wehner had re- 
cently supplied to the DMV. Luckily, a friend who saw the photo on TV called 
Wehner before a nervous police officer pulled him over. Shortly thereafter, police lo- 
cated the fake Kevin Wehner and shot him dead in a gun battle. Florida’s inability 
to check a forged birth certificate could have killed the real Kevin Wehner just as 
easily. 


WHY REAL ID HAS NOT YET BEEN IMPLEMENTED 

Unfortunately, not everyone agrees with the need for better drivers’ license secu- 
rity. Opposition to REAL ID unites the nations’ governors and the ACLU. As a can- 
didate, President Obama campaigned against REAL ID. And as a governor. Sec- 
retary Napolitano did the same. So it was no surprise that the Obama administra- 
tion supported repeal of REAL ID and adoption of a softer approach, called PASS 
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ID. Expecting PASS ID to be adopted, the administration soft-pedaled the states’ 
obligations under REAL ID. 

But PASS ID did not pass, and REAL ID is still the law. Unfortunately, however, 
it’s not being treated like a real law. In 2009, the Secretary of Homeland Security 
permanently stayed the deadline for states to come into material compliance, on the 
grounds that the Department was pursuing PASS ID. By March 2011, with the 
deadline for full compliance with REAL ID just two months away, that reasoning 
wouldn’t work anymore; everyone recognized that PASS ID was dead. But the Sec- 
retary nonetheless postponed the deadline for full compliance to January 2013 with- 
out taking comments. The remarkable justification for the delay was that the ad- 
ministration had encouraged the states to hope that the law would change, so they 
didn’t take steps to comply with the law as it stands: 

[S] ome States delayed investing in new technolo^ and process changes because 
of uncertainty associated with Congressional action on the PASS ID Act. PASS 
ID, which was supported by the Administration as well as State associations, 
including the National Governor’s Association and the American Association of 
Motor Vehicle Administrators, would have modified certain requirements of 
REAL ID to facilitate State compliance. States delayed making investments to 
implement REAL ID to ensure they were not making expenditures to comply 
with requirements that would have been undone had PASS ID been enacted 
into law. Now that PASS ID seems unlikely to be enacted, DHS anticipates 
States will refocus on achieving compliance with the REAL ID requirements. 

Wow. I only wish I could get an extension on my teix return by saying I was hop- 
ing the law would change before the returns were due but that I’m now ready to 
“refocus on achieving compliance” with the requirements of the tax code. 

In fact, apart from hoping that the states will refocus, the Department does not 
seem to be doing much to encourage them to meet the new deadline. As far as I 
can see, it hasn’t audited state compliance; it hasn’t processed the submissions of 
states that want to certify their compliance with REAL ID; and it hasn’t pressed 
the states that are lagging far behind to step up their efforts. 

THE 9/11 COMMISSION IS RIGHT: WE CAN’T AFFORD MORE DELAY 

That approach will mean years of delay in improving drivers’ license security, mil- 
lions more victims of identity theft, and perhaps more victims of terrorism. It will 
mean negating not just a federal law but one of the last unimplemented rec- 
ommendations of the 9/11 commission. The members of that commission recently re- 
assembled for a tenth anniversary review of the nation’s progress in adopting its 
recommendations. They were blunt in their criticism of the administration’s delay 
in implementing REAL ID: 

Recommendation: “The federal government should set standards for the 
issuance of birth certificates and sources of identification, such as drivers li- 
censes.” 

[T] he deadlines for compliance have been pushed back twice . . . until January 
2013. The delay in compliance creates vulnerabilities and makes us less safe. 
No further delay should be authorized; rather, compliance should be acceler- 
ated. The delay in compliance creates vulnerabilities and makes us less safe. 
No further delay should be authorized; rather, eomplianee should be accelerated. 
(Emphasis added.) 

The 9/11 Commission members are right. The foot-dragging should stop, in Wash- 
ington and in the states. 

MOST STATES ARE READY TO MEET THE REQUIREMENTS OF REAL ID 

This is particularly true because, despite all the public outcry and political pos- 
turing, most motor vehicle departments are making good progress toward the goals 
set out in the REAL ID act. Janice Kephart of the Center for Immigration Studies 
has done invaluable work in surveying the states’ progress toward achieving compli- 
ance with the standards set by REAL ID. Her most recent study estimates that nine 
states are on track to achieve full compliance with all REAL ID requirements by 
January 2013, and that another 27 will have achieved material compliance with the 
act by then. That means that the great majority of states can meet the deadline, 
at least for material compliance, if they simply keep on doing what they have been 
doing. 

In saying that, I do not mean to overlook the distinction between material compli- 
ance and full compliance. The principal difference is that states can achieve mate- 
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rial compliance without having in place an electronic verification system for birth 
certificates. To achieve full compliance, they must check birth certificates with the 
issuing jurisdiction. 

Now, as you might guess from my early remarks, I think that checking birth cer- 
tificates is crucial to achieving a more secure license system. Birth certificates are 
much easier to forge and much harder to check than licenses, so it’s no wonder that 
everyone from aspiring terrorists to cop-killing car thieves views a forged birth cer- 
tificate as the key to building a fake identity. 

And so, having an electronic system for checking birth certificates is crucial. It 
too should be in place as soon as possible. 

BIRTH RECORDS CAN BE CHECKED ELECTRONICALLY TODAY 

Once again, there is good news on this front in the Kephart report, which says 
that by February of this year, 37 states had already entered their birth records into 
a system that allows other agencies to conduct verification online. This system, 
called Electronic Verification of Vital Events (or EWE), is administered by the Na- 
tional Association for Public Health Statistics and Information Systems (or 
NAPHSIS). The network is still growing; NAPHSIS tells me that they’ve added an- 
other state since Eebruary; EWE now covers 38 states. And the system isn’t just 
theoretically available. It’s actually being used on a daily basis by several US gov- 
ernment agencies, such as the State Department’s passport fraud investigators, the 
Office of Personnel Management, and the Social Security Administration. 

The really good news, then, is that there are no technical barriers to nearly imme- 
diate implementation of electronic birth certificate checks. Any state that can 
achieve material compliance by 2013 can also achieve the most important element 
of full compliance by that date; it just has to hook up its DMV to EWE. In short, 
nearly 40 jurisdictions are on track to do what the 9/11 Commission recently urged 
them to do: implement drivers’ license security without delay. 

WHY CONGRESS NEEDS TO ACT 

Now let me turn to three pieces of bad news, and the reason that the 9/11 Com- 
mission’s goal will remain unfulfilled unless Congress acts. 

1. Everyone’s security is set by the weakest states, not the strongest. 
First, the efforts of nearly 40 jurisdictions to improve their license security won’t 
do us much good unless the remaining states get on board. It’s become quite obvious 
that identity thieves — whether they’re illegal workers or fraudsters — keep a close 
eye on the license security practices of the states. When they need a fraudulent doc- 
ument, they always manage to find the states with the weakest security. 

This is why REAL ID was needed in the first place. Many states did a good job, 
and a few did not; but those few undermined the efforts of all the others. We have 
to bring the laggard states up to the same standards that most states are on track 
to meet. Only a firm deadline, with penalties, will do that. And, since the adminis- 
tration has made clear its reluctance to enforce REAL ID, Congress needs to impose 
its own deadline. 

2. We need new penalties for noncompliance. That brings me to the second 
piece of bad news. The main penalty for states that miss deadlines is that TSA will 
refuse to accept the licenses they issue, meaning that residents of those states won’t 
be able to fly without a U.S. passport or other strong ID. The problem with this 
penalty is not that it’s too weak. 

Rather, it’s too strong. It’s like a nuclear weapon — so big and so damaging to so 
many innocent people that whoever sets it off is likely to be judged harshly. With 
both sides aware of the risks, REAL ID penalties are at best a game of chicken be- 
tween recalcitrant states and DHS. If the states convince DHS that they will not 
meet the deadline, DHS will probably cave and issue an extension. If DHS convinces 
the states that real penalties will be imposed and the deadline will not be extended, 
then the states will probably cave and come into compliance. But to be candid, hav- 
ing granted two extensions already, I don’t think this administration can persuade 
the states that this time is different. 

That’s why Congress should act. REAL ID needs a statutory deadline with pen- 
alties that are credible. Here’s one idea. Remember that the states, almost without 
exception, have accepted more than $220 million in grants to comply with REAL ID 
or improve license security; they accepted grants during fiscal years 2005, 2007, 
2008, 2009, and 2011. Many of those grants required the states to affirm that they 
were in the process of complying with REAL ID. Yet years later some of them still 
are not on track to meet the much-delayed implementation deadline. This raises the 
question whether the lagging states took federal grant funds in good faith and 
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whether they spent the funds prudently. If they lag so badly that they miss even 
the January 2013 deadline, perhaps it’s time for them to give the money back. 

So here’s one idea for changing the dynamic of REAL ID enforcement: perhaps 
any future appropriations or authorization bill dealing with homeland security, ter- 
rorism, or immigration should include a provision requiring that states failing to 
meet the REAL ID deadline must return any funds received to improve drivers’ li- 
cense security. The paybacks could be cumulative, increasing over time so that the 
states have a growing incentive to comply. While imposing fines on states or a re- 
quirement to disgorge grant funds would raise legal concerns, I see no bar to auto- 
matically reducing by the amount of the penalty any future payments that would 
otherwise be due to states under other programs. Such a penalty would also respond 
to the current budget climate by reserving scarce federal funds for states that live 
up to their obligations under federal law. It could be implemented either through 
appropriations or authorization bills. That’s the kind of modest but credible penalty 
that is likely to finally break the last logjam of lagging states and bring about na- 
tionwide license security. 

3. Electronic birth certificate checks probably won’t happen without en- 
forcement of the deadline. Finally, the last piece of bad news concerns the birth 
certificate network, EWE. As I said, it is available and ready for states to use. But 
the states are not in fact using it, at least not to check birth certificates from other 
states. (Some states do use the system to check their own birth records.) Indeed, 
a pilot in which three states were using EWE to do cross-border birth record checks 
has recently ended, and the states involved decided not to continue the checks — a 
troubling bit of backsliding, given the importance of birth certificates as breeder doc- 
uments for false IDs. 

Why are states reluctant to use EWE for drivers’ license checks? I suspect the 
problem is the cost of the service. When the system is running at low volumes, as 
it is now, the cost of an electronic record check on EWE is nearly two dollars. 
That’s a lot of money for states that issue tens of millions of licenses and may 
charge only $20 or $30 for each one. States have an incentive to hang back and let 
other states pay the high cost of being an early adopter. 

This Alfonse-and-Gaston problem is easy to solve. If all state motor vehicle agen- 
cies join EWE at the same time, its volume pricing will bring the cost of each check 
down to less than a dollar — 94 cents, I’m told by NAPHSIS. We can achieve this 
goal if DHS simply enforces the existing deadline of January 2013. Overnight, the 
cost of the service will drop. That is another reason to impose a deadline and to 
include birth record checks. 

I know the states have complained about the costs of REAL ID. That complaint 
makes no sense in the context of EWE, however, because most of the 94-cent cost 
goes to state vital records agencies to cover their costs of maintaining EWE 
records. Let me say that again; roughly 87 cents of the 94-cent EWE fee is simply 
a transfer between state agencies — from state DMVs to state vital records offices. 
Even when those transfers cross state boundaries, they go in both directions and 
are likely to roughly balance out. 

It turns out that the states will be literally paying the great bulk of EW^E fees 
to themselves, and their reluctance to make these payments is simply a disguised 
turf war between the DMVs and the vital records offices. Surely we should not leave 
future victims of future identity thefts and terrorist acts unprotected simply because 
two state agencies do not agree on which of them will pay to maintain digitized 
birth records. 

Still, if Congress wants to help the states achieve compliance by further lowering 
the cost of birth record checks, there is a way to do that while also making the coun- 
try more secure. As I understand EWE’s pricing, its lowest fees will be charged to 
all comers once volume in the system exceeds 1.2 million checks a month. Bringing 
all the states on board through REAL ID will achieve that end. But so will requiring 
that the State Department check all birth certificates through EWE before issuing 
a passport. Today, I believe. State only checks a limited number of certificates 
through EWE, as part of its fraud prevention program. If it checked all certificates 
through EWE, it would likely uncover more fraud, and it would lower the cost of 
such checks dramatically for all. This would add to the State Department’s costs, 
but not to the deficit, because the cost of passport processing measures is recovered 
by passport fees. 


CONCLUSION 

Making sure that Americans can rely on the security of their drivers’ licenses is 
a vital national priority. It has been stalled for too long, and this hearing serves 
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an important purpose in drawing attention to how much has been achieved and how 
much still remains to be done. 

Thank you for the opportunity to testify here today. 


Mr. Sensenbrenner. Thank you, Mr. Baker. 

Mr. Quam? 

TESTIMONY OF DAVID QUAM, DIRECTOR, OFFICE OF FEDERAL 
RELATIONS, NATIONAL GOVERNORS ASSOCIATON 

Mr. Quam. Thank you, Mr. Chairman, Mr. Scott, Mr. Smith, Mr. 
Conyers, Members of the Subcommittee. It is a pleasure to be here 
on behalf of the National Governors Association on an issue that 
governors have worked on for a very long time. 

I think there is some good news here that you are hearing. 
States have made progress, considerable progress in moving ahead. 
Every governor is concerned with increasing the integrity and secu- 
rity of their driver’s licenses. They were in 2005, 2007, 2009. They 
are interested in that issue today. Fraud, theft, security are all con- 
cerns for every governor. 

And because of that, governors, when they started to address 
both REAL ID and the regs as they came out, looked through a 
lens of some core principles, that licenses and identification cards 
should accurately reflect the identity of the owner, that the laws 
and regulations should facilitate and encourage participation by all 
jurisdictions, that those laws and regulations should also enhance 
the security and integrity of all licenses and ID cards while retain- 
ing state flexibility to innovate, set a floor, let states go above it, 
and then address critical privacy concerns while reducing or elimi- 
nating unnecessary cost. 

Part of the delay with REAL ID, as it was initially written and 
as it came out, represented an unworkable and unfunded mandate, 
a very serious challenge for states. What we need is continued 
flexibility in implementation if we are going to meet the core objec- 
tives of the Act, something that I think governors share with this 
committee and with Congress, and the Department of Homeland 
Security. 

So where do we stand? Mr. Chairman, you accurately stated ex- 
actly where states are today. Six states have submitted full compli- 
ance certifications. Twenty-two states have said that they are ma- 
terially compliant. Four states are using enhanced driver’s licenses, 
something akin to REAL ID but currently doesn’t exactly match 
the requirements of REAL ID. Twelve states have met 15 of 18 
benchmarks, and another 12 states are falling short of that. 

In addition, you have 13 states who have laws on the books say- 
ing they will not comply. You have another three who are saying 
we won’t comply unless certain conditions are met, and often that 
goes to funding. 

Of the five electronic databases necessary to really make REAL 
ID click, only two are nationally deployed and operational and 
being used by states. That is SAVE with regard to immigration sta- 
tus, and SSOLV with regard to Social Security. Of the other three, 
the passport system I believe may come online this year. EWER, 
the Vital Records states, are joining and participating in digitizing 
their records, but that will not be fully implemented by the states 
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for some time, and there is not one DMV currently signed up to 
use EWER. As a matter of fact, the pilot program for the DMVs 
expired last year. 

And then the final one, the state-to-state driver’s license system, 
which has taken time to satisfy the governance, the privacy, and 
how it will work between states, the implementation to get it to an 
operational system starts in 2015. It won’t be fully ready, from the 
stats I have seen, until possibly as late as 2023. Yet those are the 
systems you really need to make this work from an electronic 
standpoint and get this working. 

So where do we go from here? States need that clear guidance. 
For those numbers, those state numbers to become 100 percent, 
states need to be able to evaluate where they are and what the re- 
quirements are from DHS. We have heard and we look forward to 
additional guidance from the Department of Homeland Security to 
see exactly where states stand and whether or not January 15th, 
2013 can be met. If it can’t be met, it is probably not at the states’ 
hands. It is because this was a bridge too far to begin with. 

One of the reasons why governors have always been constructive 
partners is because driver’s licenses have traditionally been the re- 
sponsibility of the states. One of the reasons this has taken so long 
is because I believe the Federal Government found out how com- 
plicated this process is, how hard it is to validate those source doc- 
uments, and how hard it is to check everything on those cards. 

That being said, the states have made great strides. Getting the 
guidance out, being able to determine where we are, and then find- 
ing out what it is going to take to fill those gaps, including funding, 
I think will be critical to finally meeting the objectives of REAL II), 
objectives that are shared by all governors, this Congress, and the 
Administration. Thank you. 

[The prepared statement of Mr. Quam follows:] 

Prepared Statement of David Quam, Director, Federal Relations, 
National Governors Association 

Chairman Sensenbrenner, Ranking Member Scott, distinguished members of the 
committee; my name is David Quam, Director of Federal Relations for the National 
Governors Association (NGA). I appreciate the opportunity to appear before you 
today to discuss the issues surrounding state implementation of REAL ID. 

overview: 

Governors have always been committed to providing their citizens with drivers’ 
licenses that are accurate and secure. In fact, during multiple discussions among 
governors regarding REAL ID, it was clear that all governors share common prin- 
ciples regarding licenses and state identification: 

• Licenses and identification cards should accurately reflect the identity of their 
owner; 

• The systems that produce the cards and the cards themselves must be secure; 

• Information received about individuals should be protected to ensure their 
privacy; and 

• Services and products must be provided in a cost-effective manner that maxi- 
mizes value for taxpayers without diminishing the security or integrity of the 
license. 

It is through this lens that governors have viewed federal efforts to regulate state 
licenses, such as REAL ID. While governors believe that the objectives of REAL ID 
are laudable, they have found that the law represents an unworkable and unfunded 
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mandate that — without continued flexibility in its implementation — will fail to make 
us more secure. 


background: 

Congress passed the REAL ID Act (REAL ID) as part of the Emergency Supple- 
mental Appropriations for Defense, the Global War on Terror and Tsunami Relief 
Act (P.L. 109-13). The law replaced section 7212 of the Intelligence Reform Act (P.L. 
108-458), which established a negotiated rulemaking to determine national stand- 
ards for state driver’s licenses and identification cards (DL/IDs). NGA supported the 
compromise contained in section 7212 because it allowed stakeholders, including 
governors, to participate in the process of reforming what traditionally has been a 
state function. 

Although the negotiated rulemaking was already underway, REAL ID repealed 
the provision and replaced it with statutory standards, procedures and requirements 
that must be met if state-issued licenses and identification cards are to be accepted 
as valid identification by the federal government. REAL ID’s mandates require al- 
teration of long-standing state laws, regulations and practices governing the quali- 
fications for and the production and issuance of licenses in every state. Complying 
with REAL ID’s standards will require significant investments hy states and the 
federal government and will test the resolve of citizens directly affected by changes 
to state systems. 

More importantly, all of this must be done quickly. The next milestone for states 
is January 15, 2013. As of that date, a state must be “materially compliant” with 
the act, or individuals can no longer use its licenses or identification cards to board 
commercial aircraft. 

Given its impact on states and individuals, governors worked closely with other 
state groups, including the National Conference of State Legislatures and the Amer- 
ican Association of Motor Vehicle Administrators, to recommend a regulatory frame- 
work that could bridge the gap between state laws and practices and the unrealistic 
requirements of REAL ID. NGA commends the Department of Homeland Security 
(DHS) for its continued efforts to develop a workable regulatory system to imple- 
ment the law. 

Unfortunately, even after the final rule was released, major issues remained in- 
cluding a lack of funding for state implementation; privacy concerns regarding the 
collection and use of individuals’ information; and uncertainty regarding the avail- 
ability, development and cost of electronic databases. These concerns ultimately 
helped propel 16 states to pass laws prohibiting compliance with REAL ID; laws 
that remain on the books today. 

DEVELOPING A SOLUTION: 

Given states’ ongoing concerns, and the looming deadline for material compliance, 
governors asked NGA to work with state experts to develop recommendations to im- 
prove REAL ID based on the following principles: 

1. Fulfill the 9/11 Commission recommendation for the “federal government to 
set standards for sources of identification;” 

2. Facilitate and encourage participation by all jurisdictions; 

3. Enhance the security and integrity of all licenses and ID cards while retain- 
ing state flexibility to innovate; and 

4. Address critical privacy concerns and reduce unnecessary costs. 

NGA’s work culminated in the following recommendations: 

• Provide funds necessary for states to comply with federal require- 
ments. The projected costs of compljdng with the act far outweigh existing 
sources of funding. To the extent federal requirements result in increased 
costs for states, the federal government should fund the cost of complying 
with the law. 

• Allow for date-forward implementation. To comply with the act, states 
should only be required to issue compliant DL/IDs beginning on a certain 
date. All DL/IDs issued after that date would comply with the federal law, 
but individuals would not be required to obtain a new DL/ID until their exist- 
ing DL/ID expires. This provision would not apply to non-federally compliant 
DL/IDs issued by a state. 

• Limit required electronic verification of documents. The final rule 
identifies five systems states will be required to use to be compliant with the 
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law: Social Security On-Line Verification (SSOLV); Electronic Verification of 
Vital Events Records (EWER); Systematic Alien Verification for Entitlements 
(SAVE); an all-drivers system run by states to ensure an applicant is not li- 
censed in another state; and a system run by the U.S. Department of State 
to validate foreign passport information. Of these systems, only SSOLV and 
SAVE are nationally deployed and functioning. Because of uncertainty re- 
garding how and whether the five electronic systems will work, how they will 
be integrated and how they will ensure the protection of data, their use 
should not be required by federal law or regulation. Rather, states should be 
permitted to use existing verification processes to comply with federal re- 
quirements. 

• Establish a unique symbol to indicate that a license or identification 
card complies with federal requirements. States should retain the au- 
thority to issue DL/IDs that do not meet federal standards. In order to dif- 
ferentiate between DL/IDs that meet federal requirements and those that do 
not, DHS should work with states to designate a means to easily identify fed- 
erally compliant DL/IDs. 

• Provide greater clarification and flexibility regarding physical secu- 
rity requirements. Not all departments of motor vehicles issue DL/IDs 
through the same process; some use central issuance (Cl), others use over- 
the-counter issuance (OTC) and some use a hybrid CI/OTC process. Therefore, 
DHS should allow states to use a combination of security features designed 
to protect the physical integrity of DL/IDs. Many states have processes in 
place to issue, maintain and protect DL/ID information. Federal law and ac- 
companying regulations should provide flexibility in how states prevent tam- 
pering, counterfeiting or unauthorized duplication of DL/IDs for fraudulent 
purposes. 

• Establish minimum guidelines for the further proteetion of person- 
ally identifiable information. DL/ID information is protected by federal 
and state Driver Privacy Protection Acts (collectively, DPPA). However, since 
DPPA was enacted well before Real ID, DHS should establish further min- 
imum guidelines to address requirements to protect the security, confiden- 
tiality and integrity of personally identifiable information that could not have 
been contemplated at the time of DPPA enactment. 

• Establish a process to allow states greater flexibility in validating an 
applicant’s identity under exceptional circumstances. States should be 
permitted to establish a process to validate an applicant’s identity in rare 
cases where the applicant is unable to present the documents specified in the 
act. 

• Recognize enhanced driver’s licenses as being compliant with REAL 

ID. Enhanced driver’s licenses issued by states should be considered compli- 
ant with requirements for secure state DL/IDs. 

• Establish a demonstration program to evaluate electronic informa- 
tion sharing among states. The hub system envisioned by DHS in the final 
REAL ID rule is a complex and potentially costly endeavor, and participation 
in the system should not be federally required. Instead, the federal govern- 
ment should facilitate a demonstration program among a few states to deter- 
mine projected costs for such a system, the appropriate governance structure 
for administrative purposes and the appropriate security and privacy meas- 
ures to protect individuals’ personal information. 

• Provide access to federal electronie systems. Access to any federal elec- 
tronic systems that states are required to use to comply with the act should 
be provided free of charge, just as the E-Verify system is made available to 
employers without cost. 

PROVIDING FOR ADDITIONAL SECURITY IN STATES’ IDENTIFICATION ACT: 

In 2009, NGA supported S. 1261, the “Providing for Additional Security in States’ 
Identification Act,” (PASS ID) because it is built largely on governors’ recommenda- 
tions for solving the problems inherent to REAL ID. 

For example, to address the issue of cost, PASS ID would have eliminated fees 
associated with the use of existing federally run databases that states must use to 
issue DL/IDs. It would also have allowed states to innovate to meet security require- 
ments and eliminated the requirement to use electronic verification systems that do 
not yet exist or are not nationally deployed. If implemented, these changes would 
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have combined to cut state costs of compliance from $3.9 billion to approximately 
$2 billion. 

PASS ID also recognized that at the time only two of the electronic systems states 
must use under REAL ID existed and were nationally deployed: SAVE to verify im- 
migration status and SSOLV to verify social security information. 

Today little has changed; SAVE and SSOLV remain the only two systems avail- 
able although an electronic system to verify passports should be fully operational 
later this year. 

Work to develop an electronic database to share DL/IDs information among states 
is slow, with implementation of an operational state-to-state system not anticipated 
until 2015. A fully deployed and populated system will not be available to states 
until 2023. 

Likewise, a national vital records database to check birth certificates remains un- 
funded and lacking for data. Specifically, the recent recession and lack of federal 
funds has prevented states from digitizing their records — a necessary step for mak- 
ing a national database a reality. 

PASS ID recognized these shortcomings by not requiring states to use systems 
that do not exist. It also addressed privacy concerns by requiring procedures to pre- 
vent the unauthorized access to or sharing of information, as well as requiring pub- 
lic notice of privacy policies and the establishment of a redress process for individ- 
uals who believe their personal information should be amended in records systems. 

Finally, PASS ID tied timelines for issuance and full implementation to the com- 
pletion of final regulations. Although not a true date-forward implementation sched- 
ule as called for by NGA, when combined with other enhancements, PASS ID would 
have allowed states to begin issuing compliant licenses and IDs faster than called 
for by REAL ID. 


conclusion: 

Since its passage, governors have consistently offered constructive recommenda- 
tions for implementing REAL ID. Governors have encouraged DHS and Congress to 
“fix” the act by implementing statutory or regulatory changes to make REAL ID fea- 
sible and cost-effective. They also have called on the federal government to “fund” 
REAL ID by providing federal dollars to offset state expenditures for meeting new 
federal standards. 

If Congress wants to see REAL ID implemented, it needs to encourage and sup- 
port the implementation of regulations and guidelines that make compliance a pos- 
sibility. DHS has worked closely with states to understand the complexities of the 
DL/ID process and provide rules that encourage better and more secure DL/IDs in 
a more cost-effective and realistic manner. More, however, needs to be done. 

Security of our nation is not a partisan issue. Every governor is a security gov- 
ernor. Every governor is interested in making government work. Governors look for- 
ward to continuing efforts with Congress and DHS to find workable, cost-effective 
solutions that can increase the security and integrity of all state license and identi- 
fication systems. 


Mr. Sensenbrenner. Thank you very much. 

The Chair is going to clean up and ask questions last. So the 
gentleman from Virginia, Mr. Scott, is recognized. 

Mr. Scott. Thank you, Mr. Chairman. 

I guess, Mr. Williams, what ID is necessary to get a REAL ID? 
What does a person have to present in order to get identification? 

Mr. Williams. Well, what an individual would need to do is 
present source documents, for example, such as a birth certificate, 
and if they have a Social Security number, they should present 
that Social Security card or another acceptable document with the 
Social Security number so that number can be verified. 

If they are in the country, for example, with immigration papers, 
then they certainly need to present their immigration document to 
be verified. 

Mr. Scott. Let me just — for a citizen just trying to get an ID 

Mr. Williams. For a U.S. citizen? 

Mr. Scott. Yes. 
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Mr. Williams. A birth certificate and Social Security card. 

Mr. Scott. Now, what do you need to do to get a birth certifi- 
cate? 

Mr. Williams. To get a birth certificate, different states have dif- 
ferent processes in regards to how you get it and who is authorized 
to get a birth certificate. But in many cases, I think you would 
have to go to your vital records agency within that state to request 
a birth certificate. And again, that is the general term. Different 
states have different processes. 

Mr. Scott. And again, what do you have to present to get the 
birth certificate? 

Mr. Williams. Each state I think has a different process for it. 

Mr. Scott. Could a terrorist show up and get a birth certificate, 
my birth certificate? 

Mr. Williams. That is a question I couldn’t answer. I don’t par- 
ticipate in the vital records agency processes. 

Mr. Scott. I don’t know where my Social Security card is. I 
know my number, but I wouldn’t have a clue as to where the actual 
card is. 

Mr. Williams. If you don’t have your Social Security card, there 
are other documents that you can use with that Social Security 
number. 

Mr. Scott. Okay. 

Mr. Williams. For example, if you are employed and you have 
a W-2 

Mr. Scott. If two people were wandering around using the same 
birth certificate or the same Social Security number, is there some- 
thing in the system that would expose that? 

Mr. Williams. Well, Social Security, the agency has the capa- 
bility to identify 

Mr. Scott. A lot of people sell Social Security numbers, those 
that would actually check when you go through the process, as a 
valid Social Security number. How do you know that the person be- 
fore you is the one with that Social Security number? 

Mr. Williams. Again, that would be a process of checking with 
the Social Security Administration and using their processes. 

Mr. Scott. REAL ID doesn’t solve this. 

Mr. Williams. No, REAL ID doesn’t govern that process. 

Mr. Scott. Mr. Heyman, is possession of a fake ID a crime? 

Mr. Heyman. I believe it is. 

Mr. Scott. You believe it is? 

Mr. Heyman. I don’t know. 

Mr. Scott. You don’t know. 

Mr. Heyman. Use of it is a crime. 

Mr. Scott. Use of it. But, I mean, if you just ran across some- 
body and they had three or four different IDs in their pocket, 
would that be a — ^you don’t know if that is a crime or not? Okay. 

Mr. Williams, you indicated exposure of employee fraud. If you 
have a DMV clerk somewhere in some rural area just making 
money by selling fake IDs, would these IDs be as good-looking as 
other IDs? 

Mr. Williams. The most valuable ID that you can actually get 
is working with an internal person to produce one based upon the 
internal processes of that particular state’s DMV. The cost for that 
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process, to show you how realistic it is, for example in New York, 
they were selling fake IDs for as much as $10,000 per copy. In the 
State of, for example, Maryland, a fake ID produced internally 
could render as much as anywhere from $2,500 to $3,000; Cali- 
fornia, anywhere from about $5,000 

Mr. Scott. Well, if you have bribed a DMV official, will the ID 
be — would anybody be able to ascertain that this is a fake ID? 

Mr. Williams. If the ID is produced internally, it will be exactly 
the same as any other ID. That is the value of finding someone 
who works inside, and that is what REAL ID seeks to prevent. 

Mr. Scott. How does it prevent internal fraud? 

Mr. Williams. By coming up with a number of internal processes 
that the DMV must actually utilize, for example, to include back- 
ground checks of its employees, but also internal processes to en- 
sure that, for example, one person does not have the authority to 
actually produce a driver’s license from start to finish, and then 
other internal processes like, for example, making sure that you 
have a photo of the individual who sought a driver’s license 
through application so you can actually check internally to see 
whether or not that photo shows up on any other driver’s license 
with a different name and Social Security number. 

Mr. Scott. Is that check actually done anywhere? 

Mr. Williams. That check is actually done by a number of DMVs 
today. With the advent of REAL ID, that number of internal checks 
has gone up significantly. 

Mr. Scott. If I can just follow up on this with one question? 

Mr. Sensenbrenner. Without objection, the gentleman has one 
more question. 

Mr. Scott. If two people are using the same photo, that would 
be exposed? 

Mr. Williams. If two people were using the same photo at the 
same DMV, DMVs have 

Mr. Scott. The DMVs, one is in Connecticut and one is in Vir- 
ginia. 

Mr. Williams. Well, if they were in different states and those 
states did not have a process where they actually shared photos, 
then that would be more difficult. But in the same state, a number 
of states have same-day processes where they take your picture 
and then run it through the database and check with all other 
photos in their database to see whether you are the person you 
claim to be. And then on a 24-hour basis, they run it through their 
entire system to process to see whether or not you have a, quote 
unquote, face that is recognized in their database, and then what 
they have is control investigators. Once they ascertain that you 
may have a photo already in their database, the investigator is ac- 
tually used to pursue to determine whether or not you are an exact 
match or if you are a similar match but not necessarily the exact 
same person. 

So a number of processes are in place to prevent the same photos 
with different IDs inside the state level. States have cooperative 
sharing relationships where they are actually starting to share 
some of their photos across state lines to ensure that you don’t 
have, for example, a picture ID in the State of North Carolina, but 
also in the State of South Carolina. 
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Mr. Sensenbrenner. I guess all this was done because of REAL 
ID. 

The gentleman from Michigan, Mr. Conyers. 

Mr. Conyers. Thanks, Chairman Sensenbrenner. 

Let’s use this time to focus on the two issues that have been so 
well raised in this discussion, and I want to thank attorney Stew- 
art Baker for his emphasis on the privacy issue. Let’s talk about 
how we fund and how we guard for privacy. Remember now that 
we may be meeting with the Secretary Napolitano on this subject, 
and we want to use these minutes to get your best advice as to how 
we deal with her, with the Chairman, with these two issues. 

Let’s start off with you, David Quam, and then let’s everybody 
just chime in when you want to. 

Mr. Quam. Thank you, sir. I think the emphasis with the Sec- 
retary has really got to be first and foremost with the guidance 
that needs to come out so states know exactly where they are. So 
knowing those rules so states can evaluate where we are today and 
where states need to be by January 15th is critical. I think that 
guidance is pending and will come out very shortly. 

With regard to privacy, governors have always been concerned 
with governance of these systems. It is how the systems work, but 
how are they governed? How is individual information being pro- 
tected, and how can it be corrected if there is a mistake, to make 
sure there aren’t false-positives? 

So, very large privacy concerns that need to be worked out. That 
is why some of those systems are going to take some time to bring 
online, and privacy guidance is critical, and hopefully it is going to 
be part of this next guidance. 

And then finally, with regard to funding, states have long said 
this is an expensive proposition. If it is a mandate from the Federal 
Government, it should be paid for by the Federal Government. One 
simple example that we have called for, if there is a requirement 
to use Federal systems, then those Federal systems should be free 
to the states, much like e-Verify is for a lot of businesses. The Fed- 
eral Government has the databases, let us use that. It is part of 
the problem we have had with vital records where there is a fee 
that has to be charged every time. In the fiscal condition of states, 
that can be very problematic. But with some funding for states, I 
think you can find that states can more easily come on board. 

Mr. Scott. Attorney Stewart Baker. 

Mr. Baker. On the privacy issue, to my mind the biggest privacy 
issue in this area is not having a good ID. I don’t understand what 
privacy interest is served by having a bad ID. The real privacy con- 
cern is the risk that your identity will be stolen and someone will 
use a fake ID to pretend to be you. 

The Department has lots of information about people who are en- 
gaged in that kind of identity fraud, and there needs to be better 
coordination with the states so that they don’t continue to issue 
driver’s licenses to people using bad Social Security numbers and 
so they can reinvestigate people who may have used bad Social Se- 
curity numbers to get their cards in the first place. 

So that would be a privacy issue that I think would be very use- 
ful to address. I do think the Department has done a good job of 
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coming up with some additional privacy standards that they think 
should he met by states to protect data, and that is a good thing. 

On the question of unfunded mandate, I think that is — I don’t 
agree with it, and the problem with that is the argument that 
somehow the Federal Government should make free the SSOLV 
and SAVE programs that allow you to use the government’s 
records to check Social Security numbers and the like. Those cost 
pennies, maybe 20 cents. The states, on the other hand, have put 
in place EVVER, in which they propose to charge $2 a check, the 
income of which they are going to keep to use for 

Mr. Conyers. Do you prefer the state solution? 

Mr. Baker. This is the state electronic event verification, essen- 
tially the birth record database. The current prices for that are $2 
because the state vital records offices want to make about $1 every 
time they provide this information. Eor the states to say we want 
to charge you dollars and we want you to forgive the pennies that 
we are paying is inconsistent, I think. 

Mr. Conyers. Let me get to Darrell Williams. 

Mr. Williams. There are only three issues we are talking about: 
privacy, cost, and a recommendation for DHS. On privacy, most of 
the data that we are talking about already exists in various state 
DMV databases. States use what they call — this is actually run by 
the Department of Transportation — the CDLIS system, and that 
CDLIS, which is a commercial driver’s license information system, 
actually contains the name, date of birth, and driver’s license infor- 
mation for virtually all drivers already, because whenever anyone 
applies for a CDL, a commercial driver’s license, they are run 
through the CDLIS system to determine whether or not they have 
a commercial driver’s license somewhere else. So the data that we 
are pretty much talking about in regards to privacy concerns, it al- 
ready exists in the database. 

The second issue, we talked about cost, and actually I will piggy- 
back on an example that you gave in regards to Mark Sanford. Of 
course, now, Mark Sanford did write a letter. Actually, he wrote a 
couple of letters to DHS that went to Secretary Chertoff, but also 
to Napolitano, where he expressed concern about REAL ID and its 
cost. However, in that same letter Mark Sanford said that South 
Carolina, at the time of his writing, currently met about 90 percent 
of the REAL ID requirements. So if he was concerned about cost, 
he is 90 percent there. There is only a 10 percent delta, and the 
delta wasn’t going to be overly substantial at the time when I actu- 
ally read his letter and talked with Marcia Adams, who is the 
South Carolina DMV Director in that timeframe to determine ex- 
actly where South Carolina was. So the cost delta using that exam- 
ple was not going to be that great. 

The last item in regards to a recommendation for REAL ID im- 
plementation, REAL ID is a program, and REAL ID is managed 
pretty much out of a program office. I know because I started it. 
However, the enforcement part about REAL ID today is that pro- 
gram and that program office remains in a policy environment, 
which is the exact wrong place for a program to be. 

The skill sets are not there. The program management skills are 
not there. The engineering skills are not there. So if you are de- 
signing and developing an information-based system, policy is the 
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exact wrong environment to be in for a program to thrive and flour- 
ish as we look at going forward. 

Mr. Sensenbrenner. Without objection, the gentleman from 
Michigan will be given an additional minute. 

Mr. Conyers. I thought it was 2 minutes. 

Mr. Sensenbrenner. No. I said you were already 2 minutes 
over. 

Mr. Conyers. Oh. Thank you very much. Mr. Heyman, please. 

Mr. Heyman. Thank you, Congressman. Thank you. Let me just 
talk on those three points that you are interested in. 

First, in terms of the privacy, the REAL ID Act did not con- 
template or stipulate privacy requirements, but we did put in the 
regulation privacy requirements on the states. There are standards 
for data protection, particularly on the network. There will be 
encryption standards, and as Mr. Williams mentioned, the net- 
works are built on private networks that already exist with privacy 
protections. 

We are moving forward with guidance, as the states have asked 
for. That guidance will, I believe, help provide clarity for helping 
on compliance questions by providing comparable programs that 
had not possibly been contemplated. 

And then lastly on the funding question, funding this year, the 
Secretary did sign out in February 2012 new FEMA grant guidance 
to state administrative agencies to help address and to be used for 
funding driver’s license security grant programs. 

Mr. Conyers. Thank you. 

Mr. Sensenbrenner. The gentleman’s time has expired. 

The gentleman from Colorado, Mr. Polls. 

Mr. POLIS. Thank you. 

My first question is for Mr. Heyman. I am concerned that there 
are several classes of legal immigrants who would not be eligible 
for a license under this law. Some of those include non-immigrant 
visas such as victims of trafficking, immigrants who have been pa- 
roled into the U.S. for humanitarian reasons, battered immigrants 
who are awaiting actions or on petitions filed with U.S. CIS. These 
are some of the most vulnerable legal immigrants in our country. 

Does the law need to be fixed so these people can get a license, 
or is there some procedure under this law where these groups of 
legal immigrants would be able to get licenses? 

Mr. Heyman. Well, under the REAL ID Act and regulations, law- 
ful presence is assessed and determined, but the actual determina- 
tion of who to issue a state driver’s license for operating a vehicle 
but perhaps not REAL ID-compliant is left to the state. So that de- 
cision is a state decision. 

Mr. PoLis. But the issue is whether the ID would be useful for 
Federal purposes, and I think it is in many ways a backdoor Fed- 
eral takeover of the licensing requirement for the states. Do you 
anticipate that the states will have two sets of licensing require- 
ments, one REAL ID-compliant and one not? Is that what you are 
contemplating? 

Mr. Heyman. We are not — we are contemplating that if a driver’s 
license is to be used for Federal purposes, it must be REAL ID- 
compliant. 
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Mr. POLIS. As far as you know, are any of the states maintaining 
two separate types of driver’s license, one REAL ID-compliant and 
one non? 

Mr. Heyman. We don’t have an assessment at this point, as you 
know, because the compliance deadline has not been met yet. We 
do not have visibility into what all states are contemplating. 

Mr. PoLis. Have any states brought that up to the agency, that 
they are considering doing a two-ID approach? 

Mr. Heyman. I am not aware of that. 

Mr. PoLis. Okay. Again, so the concern is, again under the REAL 
ID requirements, which are being heavily pushed to the states, it 
is my understanding that a victim of trafficking or a legal immi- 
grant who has been paroled in the U.S. for humanitarian reasons 
or a battered immigrant who is awaiting actions on a petition filed 
under U.S. CIS, at least those three categories of immigrants it is 
my understanding are not able to get REAL ID-compliant driver’s 
licenses. Is that consistent with your understanding? 

Mr. Heyman. An individual must be able, must present, must be 
lawfully present in the United States to attain a driver’s license. 
So if they are lawfully present, they will be, along with all the 
other requirements. 

Mr. PoLis. Okay. Well, those are people who are lawfully present 
in the United States, but they are legal immigrants, not illegal im- 
migrants. But it is my understanding that in some cases, because 
their cases are pending, they would be unable to get the REAL ID. 
But are you saying they would be able to get a REAL ID -compliant 
state ID? 

Mr. Heyman. I am not aware of an exception to that. So if the 
Congressman would allow, we can get back to you on the record. 

Mr. PoLis. We will be happy to get you some specifics. 

Let me go to Mr. Baker. It is my understanding DHS postponed 
the REAL ID implementation under the Bush Administration, and 
I would like to ask what those reasons were for that postponement 
over those period of years. 

Mr. Baker. We concluded that the states, by and large, were not 
going to meet the deadline. It was a pretty demanding set of re- 
quirements. They had been fighting them. They had been hoping 
to delay the implementation. And we broke the implementation 
into two stages, material and full compliance, so that we could get 
the states to a place with about a 1-year extension where they were 
implementing most of REAL ID. So we gave them a relatively short 
extension to meet, I would say, 90 percent of the requirements, and 
in exchange for that we got their assurance that they were working 
diligently toward achieving the standards of REAL ID. 

Mr. POLIS. Mr. Quam mentioned that the original was untenable 
and the flexibility was critical. I would like to ask Mr. Quam, is 
there sufficient flexibility in the current law, or do we need to go 
back and add additional flexibility to ensure that this can be imple- 
mented? 

Mr. Quam. It is quite possible that we need additional flexibility. 
Part of the reason for the delay was the first set of regs really was 
untenable. It was not going to provide the opportunity for states to 
truly implement the law. I think DHS did a very good job of listen- 
ing to the states. I have to congratulate the Department, both Ad- 
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ministrations, for listening to the states and realizing how complex 
this was in making changes. 

I think this next set of guidance is going to be critical for states 
to evaluate where we are and what other flexibilities need to be 
put in. Again, with regard to some of the databases that are nec- 
essary, they are just not there. If they are not there, states cannot 
be required to meet a compliance standard that is impossible to 
meet. So that flexibility has to be there to get states to move for- 
ward. States are moving forward. They are doing the best they can 
with the rules as we have them. 

Mr. PoLis. I just want to ask for 30 seconds? 

Mr. Sensenbrenner. Without objection. 

Mr. POLIS. And the final question, Mr. Quam. So again, without 
additional flexibility, do you believe that there would have to be ad- 
ditional postponing of the hard deadline for the REAL ID Act to go 
into effect? 

Mr. Quam. Until we see the guidelines, it is impossible to say 
what is going to be necessary for the states. States do have to 
make progress in order to meet the rules as they stand today. I 
think that guidance and an evaluation by the states is going to be 
critical to determine that question. 

Mr. POLIS. Thank you, and I yield back. 

Mr. Sensenbrenner. The gentlewoman from California, Ms. 
Chu. 

Ms. Chu. Thank you, Mr. Chair. 

Under the REAL ID Act, an individual’s address has to be on the 
face of the card, but many individuals ranging from law enforce- 
ment and judges to victims of domestic violence may be put at risk 
due to this requirement. Mr. Heyman, there are many domestic vi- 
olence victims who don’t want their address on the ID card, and 
there are many victims of domestic violence. One in four women 
will experience domestic violence in her lifetime. 

What is DHS doing to address this issue, and has there been any 
study of the effect of these provisions on survivors of domestic vio- 
lence, sexual assault, or stalking? 

Mr. Heyman. There are provisions for alternative ways for iden- 
tification, the specifics of which I would actually turn to my col- 
league here, who used to work for me, who actually helped imple- 
ment them. 

Mr. Williams. The rule as written today does allow for individ- 
uals that are victims of domestic violence not to have their home 
addresses displayed, for law enforcement and judges as well. 

Ms. Chu. So there are allowances for that? 

Mr. Williams. Yes. 

Ms. Chu. Let me ask about another issue. Actually, Mr. Wil- 
liams, I would like to address this to you, and that has to do with 
the fact that, of course, there are more stringent requirements for 
the REAL ID Act, and yet at the same time there is another thing 
going on, which is that at least 34 states have introduced legisla- 
tion just this last year that would require voters to provide a photo 
ID when they go to vote. At least 12 states have introduced legisla- 
tion that would require proof of citizenship such as a birth certifi- 
cate to register to vote. 



75 


To what extent — and Mr. Heyman, too — to what extent has the 
Department been monitoring the recent attempts to enforce these 
ID requirements and its impact on voting? 

Mr. Williams. For that, I would have to really refer back to the 
Secretary Heyman in regards to what DHS is doing to monitor. 

Mr. Heyman. Well, we are aware of those provisions. They are 
not material to the compliance for REAL ID, but we are certainly 
paying attention to that. 

Ms. Chu. Let me ask about the 25 states that have, through stat- 
ute or legislative resolution, rejected their intent to comply with 
the Act. I know there has been some dialogue and so forth, but 
what conversations has DHS had with governors and state legisla- 
tures to address their concerns with the Act? And also, if REAL ID 
is implemented by 2013, what implications will it have for citizens 
from these states if there are still those that reject the REAL ID 
Act? Will citizens from these states no longer be able to board a 
plane? What implications are there for their everyday life, Mr. Wil- 
liams and Mr. Heyman? 

Mr. Heyman. Well, let me just say that if you look at all states 
and all territories to include those that have acts against REAL ID, 
all of them have made progress on driver’s license security. In fact, 
if you look at the material compliance, the 18 benchmarks for ma- 
terial compliance, 83 percent of those with benchmarks, states have 
committed to meeting or are already meeting 83 percent of those. 

What that reflects is that while the actual compliance with the 
specific Act may have been rejected by some states, they are con- 
tinuing to make progress on the actual underlying security stand- 
ards. 

Mr. Williams. I would say one of the other advantages that citi- 
zens of those states would have is REAL ID is only required when 
an individual goes to the airport and is asked to produce a form 
of ID. If that person chooses to produce a driver’s license as a form 
of ID is where the REAL ID requirement would come in. There are 
other forms of ID a person could actually produce, and that could 
be very well accepted by the TSA individuals at the airport. Or, for 
example, a person could very well have no form of ID and still be 
allowed to get on an airplane. 

So they do have alternatives and options if, by chance, you are 
addressing the issue as to, when they go to the airport, whether or 
not they would be allowed to actually board a commercial airline. 
So, yes, there are options available for them in any of those states. 

Ms. Chu. And the other forms of ID for boarding a plane would 
be? 

Mr. Williams. Please? 

Ms. Chu. The other forms of ID you said would be acceptable for 
boarding a plane? 

Mr. Williams. Well, there’s a TSA list of items that they accept, 
I guess on the TSA website, I believe, in regards to what are ac- 
ceptable forms of identification other than a driver’s license. 

Mr. Sensenbrenner. The gentlewoman’s time has expired. 

The gentlewoman from Texas, Ms. Jackson Lee. 

Ms. Jackson Lee. Mr. Chairman, thank you very much, and 
thank you for holding this hearing that reviews what I think is a 
stalled law ready for burial. I believe the REAL ID Act was imple- 
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merited in 2005, and it seems as if implementation has completely 
stalled, and there seems to be resistance to the REAL ID imple- 
mentation in the states, and it is guaranteed that the statute seem- 
ingly will never be implemented as it is currently drafted. 

It was passed as a rider to a bill funding the military expendi- 
tures and tsunami relief, so it obviously slipped under the radar 
screen. But it gives states 3 years to bring their driver’s license 
into compliance with the Act’s requirements, common licensing 
standards national database, et cetera. It is now 2012. That is 7 
years. The REAL ID has faced opposition from civil rights and civil 
liberties, but I think the real question is the lack of sufficient pro- 
tections. 

We are now in the midst of another rage of what we call voter 
ID laws in 40 states, all being confronted with the real issue of de- 
nying someone a birthright, a citizen’s right to vote. They have 
been previously able to identify themselves, have a voter registra- 
tion card. 

So I want to ask the representative of the National Governors 
Association. I have never known the National Governors Associa- 
tion to not be quite prompt, and not only prompt but conversant 
and ready to adhere to Eederal laws, but I am respectful of the fact 
of the different requirements of each state. Tell me why this has 
been so difficult and what I perceive to be opposition to imple- 
menting a law passed in 2005. And I might just put on the record 
that there are those opponents that come from all political perspec- 
tives who are dealing with questions of civil liberties and civil 
rights. But let me hear from the representative of the National 
Governors Association, please. 

Mr. Quam. I greatly appreciate the question. I think a lot of the 
problem initially was a misunderstanding of how driver’s license 
systems work, and there was an education process that had to go 
on between the time of the passage of the bill and ultimately the 
regulations that came out, and then the regulations that were re- 
written. As everybody learned how difficult the processes are, the 
fact that the states have been doing this for over 100 years and not 
the Eederal Government, and that combining rules for the Nation 
when you have each state doing their own is a difficult process. 

And so what happened is that governors really tried to be con- 
structive partners to find a solution. One of our key calls was fix 
and fund REAL ID early on. Later it became let’s take the 
strengths of REAL ID and get rid of its problems. That became the 
PASS ID Act that was introduced, at least in the Senate. 

You still see states today trying to improve and meeting some of 
these benchmarks, the integrity of their licenses, because every 
governor is a security governor. They want their driver’s license to 
be secure and safe. But very real problems were raised on both 
sides of the aisle with regard to privacy, with regard to the reach 
of the Eederal Government into state actions, and then ultimately 
how do you get this done, how do you find a solution that makes 
the most sense. 

The original compromise for a negotiated rulemaking was some- 
thing that governors and states were willing to participate in and 
were active participants. I think if that had been allowed to go for- 
ward, we may be further than we are today. But like I said, there 
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was a partnership formed between governors, between states, the 
Department of Homeland Security, and even many Members of 
Congress to try to find a way forward. You have seen a lot of 
progress, but there are still a lot of objections, and there are 16 
states who still have a law on the books today saying we will not 
comply. 

It is a problem when one-fourth of the states say we are not par- 
ticipating in a national system. It is hard to have a national system 
when one out of every four isn’t participating. 

Ms. Jackson Lee. Let me thank you for that explanation. I know 
that, as a Member of the Homeland Security Committee, I will be 
probing this independently, and I am not going to probe Mr. 
Heyman at this time. I think the record is going to be very clear 
in this hearing. It is not functioning. It is not working. I think the 
privacy issues are severe, and I think that this adds to the opposi- 
tion to this massive plague of voter ID laws. It just compounds 
fears. 

I just came out of a hearing dealing with Hezbollah and home- 
land concerns on Hezbollah’s presence on the homeland. Yes, that 
is where we need to be focusing. And, yes, we need to be acknowl- 
edging that 9/11, tragic as it was, that our message was that we 
are not going to allow terrorists to cause ourselves to undermine 
our basic civil liberties and privacy. 

So I just want to yield back at this time and say that my concern 
remains on this REAL ID law, and I believe it is not effective at 
this time. I yield back. 

Mr. Sensenbrenner. The gentlewoman’s time has expired. 

It seems from this hearing that because of the REAL ID law, 
there have been significant improvements in the security of state 
IDs, even in the states that rejected the REAL ID law. And Mr. 
Quam I notice is nodding his head, and so we will put that in the 
record. 

I think one of the ways to get the ball over the goal on this — 
and I realize as the author of the bill that this is a complicated 
bill — is, first of all, states need guidance; and secondly, the DHS 
has to show that it is serious that there is a deadline. 

So, Mr. Heyman, let me ask you, when are the states going to 
get some guidance, better guidance? 

Mr. Heyman. Guidance is in 0MB now for clearance. It should 
be forthcoming in the next couple of weeks. 

Mr. Sensenbrenner. That is good. Now, during an oversight 
hearing that this committee had last November, Secretary 
Napolitano refused to say whether or not the DHS would hold firm 
to the January 15th, 2013 deadline. Is DHS going to extend the 
deadline again? 

Mr. Heyman. We have no plans to extend the deadline. 

Mr. Sensenbrenner. That is good. Now, Mr. Heyman, in your 
testimony you state that REAL ID regulation, as opposed to the 
law, provides DHS with the ability to recognize comparable pro- 
grams in states and territories that issue driver’s license and ID 
cards consistent with the minimum requirements of the regulation. 
But the REAL ID Act does not differentiate between requirements 
that are mandatory and those that are discretionary. Please inform 
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the committee which part of the REAL ID Act authorizes DHS to 
make that distinction. 

Mr. Heyman. Congressman, what we are looking to do here is to 
take the brilliant invention of states which allowed for innovation 
in a democratic society and to capture that, in effect, such that one 
state that may have thought of a solution for implementation of the 
regs that we had not originally contemplated but was consistent 
with the regs could be identified and shared with others. That is 
the purpose of putting forward comparable programs. 

Mr. Sensenbrenner. Well, in my high school civics class, I 
learned in a democratic society that laws that are passed by a ma- 
jority vote of the legislature and signed either by the President or 
the governor are the law. Now, has that basic constitutional prin- 
ciple penetrated DHS or not? 

Mr. Heyman. The law is the law. Congressman, and the ways in 
which states can comply with that law, there may be comparable 
programs that, with technology or otherwise, that allow for con- 
sistent application of the law through state by state innovations. 

Mr. Sensenbrenner. Okay. Let’s get back to the guidance. Why 
has the DHS waited so long to issue t^he guidance? 

Mr. Heyman. The guidance has been in development over a pe- 
riod of probably a little over a year, and it is forthcoming now. I 
think it is timely. It will give states an opportunity to assess where 
they are in the compliance process, and for us to do the same. 

Mr. Sensenbrenner. Well, the law was signed in 2005 by former 
President Bush. Did it take DHS 6 years to start doing the guid- 
ance and now we are about ready to get to it? 

Mr. Heyman. Well, the history of the implementation is that first 
the Department established a regulation and an implementation 
plan, and then it issued two other forms of guidance in 2009. In 
our dialogue, this is a partnership with the states, and in our dia- 
logue with the states it has become clear that they have sought ad- 
ditional clarity, and we are therefore putting forward additional 
guidance. 

Mr. Sensenbrenner. Okay. Now, my final question is there has 
been a disconnect between DHS and the states, both in this Admin- 
istration and in the Bush Administration on this subject. How 
many states has DHS visited or AAMVA meetings has DHS par- 
ticipated in with regard to the REAL ID Act? 

Mr. Heyman. I believe we have traveled to 44 out of 56 states 
or territories, and I can’t give you the number on AAMVA partici- 
pation, but we regularly, perhaps even annually, participate in 
their national convention. 

Mr. Sensenbrenner. Okay. Well, thank you. I think that com- 
pletes the record. I yield back the balance of my time. 

Are there any further items that Mr. Scott wants to put into the 
record? 

Mr. Scott. Well, Mr. Chairman, we have had statements from 
others that we would like into the record, if we could. 

Mr. Sensenbrenner. Without objection, both the majority and 
the minority may put additional statements into the record that 
are relevant and material to the purpose of this hearing or the tes- 
timony of the witnesses. 

Hearing none, so ordered. 



79 


And without objection, this hearing is adjourned. I thank all of 
the witnesses for their testimony. 

[Whereupon, at 11:17 a.m., the Subcommittee was adjourned.] 
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The American Civil Liberties Union (ACLLT) writes today to oppose any additional 
efforts by Congress or the Department of Homeland Security (DHS) to force states to comply 
with the Real ID Act of 2005. We believe any such actions would not only harm individual 
liberty, but also waste scare government resources. 

hnplementation of the Real ID Act is completely stalled. Resistance to Real ID 
implementation in the states has guaranteed that the statute will never be implemented as it is 
currently drafted. Compliance with the Real ID Act is statutorily barred in 1 5 states and the 
law has been rejected by statute or resolution in at least 25 states. This state rebellion has 
caused DHS to postpone implementation of the statute repeatedly. 

And DHS has no effective tools to induce state compliance in the future. Under Real 
ID, the only remedy DHS can impose on non-compliant states is to deny the citizens of those 
states the right to use their drivers’ licenses to board airplanes or enter federal facilities. 
Because DHS has rightly recognized that it cannot possibly paralyze the air transportation 
system or deny tens of millions of Americans the right to fly, it has chosen to postpone 
implementation of the Act repeatedly. Moreover, Congress has provided only a small fraction 
of the funding that would be necessary to comply with the law. DHS should recognize these 
facts and end all administrative measures aimed at compliance. Ultimately Congress should 
repeal Real ID. 

The ACLU is America’s oldest and largest civil liberties organization dedicated to the 
principles of liberty and justice set forth in the U. S. Constitution. On behalf of more than half 
a million members, countless additional supporters and activists, and 53 affiliates nationwide, 
we advocate against unnecessary government intrusion into the lives of Americans and undue 
burdens on their privacy rights. 

Background 

The Real ID Act of 2005 was passed as a rider to a bill funding military expenditures 
and tsunami relief* The law gave states three years to bring their drivers’ licenses into 
compliance with the Act’s requirements including common licensing standards and a national 
database of drivers’ license information. 

Instead of compliance, Real ID faced widespread opposition. Groups from across the 
political spectrum opposed it. Civil rights and civil liberties groups worried that the Act 
lacked sufficient protections and might increase racial discrimination. Defenders of religious 
freedom described its negative impact on the Amish and other religious denominations. 
Consumer groups feared it would result in an expansive and cumbersome new bureaucracy. 

Others rejected Real ID as a national TD. Many groups, including the ACLU, believed 
it would facilitate tracking of data on individuals and bring government into the very center of 
every citizen’s life. It would be a de facto government permission slip needed by everyone in 
order to travel. As happened with Social Security cards decades ago, use of such ID cards 


^ Emergency SLipplcmcnlal Appropriations Act for Defense, the Global War on T error, and T sunaini Relief, 
2005, Public Law 109-U. 1 19 Stat. 2.11, 302 (May 1 1, 2005) (codified at 49 U.S.C. 10.101 note). 
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would then quickly spread and be used for other purposes - from work to voting to gun 
ownership. 

Many states rejected Real ID because of its high cost - initially estimated by DHS at 
$23 billion. States were concerned that the Act would force them to change their entire 
licensing issuance process to conform to a one-size-fits-all federal mandate. At the same time 
the states were also making great strides in improving drivers’ license security and were 
rightly concerned that Real ID would interfere with or overturn many of these efforts. Since 
Real id’s passage Congress has appropriated only $200 million for compliance with the 
statute." 

State Statutes and DHS Extensions 


Twenty five states, either through a statute or legislative resolution, rejected the Act or 
said they would not comply with Real ID.^ Fifteen states have laws prohibiting compliance 
with Real ID. Many of these provisions are complete bars on any participation by the state in 
the program. Other states have funding and security requirements for participation that the 
federal government will almost certainly never meet. 

The 15 states prohibiting compliance are: 

1 . Alaska - Alaska SlAt. § 44.99.040 (2007-2008) (A state agency may not expend 
funds solely for the purpose of implementing or aiding in the implementation of the 
requirements of the federal Real ID Act of 2005 (P.L. 109-13, Division B)). 

2 . Arizona - Ariz. Rf.V, Stat. Ann. § 28-336 (2008) (This state shall not participate in 
the implementation of the REAL ED act of 2005 (P.L. 109-13, Division B; 119 Stat. 
302). The department shall not implement the REAL ID act of 2005 and shall report 
to the governor and the legislature any attempt by agencies or agents of the United 
States DEPARTMENT of homeland security to secure the implementation of the 
REAL ID act of 2005 through the operations of the United States department of 
homeland security.) 

3. Georgia — Ga. Codf Ann. § 40-5-4.1 (2010) (The Governor of the State of Georgia, 
or his or her designee, is authorized to delay compliance with certain provisions of the 
federal Real ID Act, H.R. 1268, P.L. 109-13, enacted by Congress in 2005, until it is 
expressly guaranteed by the Department of Homeland Security, through adequately 
defined safeguards, that implementation of the Real ID Act will not compromise the 
economic privacy or biological sanctity of any citizen or resident of the State of 
Georgia.) 


■ Shawn Zeller, Slates Rev Up For Real ID, CQ, Feb. 13 2012. 

" The stales are Alaska. Arizona. Arkansas, Colorado, Georgia, Hawaii. Idaho, Illinois, Louisiana, Maine, 
Minnesota, Missouri, Montana, Nebraska, Nevada, New Hampshire, Norili Dakota, Oklalioina, Oregon, South 
Carolina, South Dakota. Tennessee, Utah, Virginia and Washington. 
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4. Idaho - Idaho Code Ann. § 40-322 (2008) (The legislature hereby declares that the 
state of Idaho shall not participate in the implementation of the REAL ID act of 2005. 
The Idaho transportation board and the Idaho transportation department, including the 
motor vehicles division of the Idaho transportation department are directed not to 
implement the provisions of the REAL ID act of 2005.) 

5. Louisiana - La. Rev. Seat. Ann. § 402 note (2008) (The Legislature of Louisiana 
does hereby direct the Department of Public Safety and Corrections, including the 
office of motor vehicles, not to implement the provisions of the REAL ID Act and to 
report to the governor any attempt by agencies or agents of the United States 
Department of Homeland Security to secure the implementation of the REAL ID Act 
through the operations of that division and department.) 

6. Maine - Me. Rev. Seat. Ann. tit. 29-A, § 141 1 (2007) (The State may not participate 
in the federal REAL ID Act of 2005, enacted as part of the Emergency Supplemental 
Appropriations Act for Defense, the Global War on Terror, and Tsunami Relief, 2005, 
Public Law 109-13. The Secretary of State may not amend the procedures for applying 
for a driver's license or nondriver identification card under this chapter in a manner 
designed to conform to the federal REAL ID Act of 2005.) 

7. Minnesota - 2009 MINN. LAWS Chapt 92 (The commissioner of public safety is 
prohibited from taking any action to implement or to plan for the implementation by 
this state of those sections of Public Law 109-13 known as the Real ID Act.) 

8. Missouri - Mo, Rev. S rA’L§ 302. 183 (2009) (The Department of Revenue is 
prohibited from: (1 ) Amending any procedures for applying for a driver's license or 
identification card in order to comply with the standards of the federal Real ID Act of 
2005; (2) Expanding motor vehicle records data it shares with other states, the federal 
government, or other agencies or providing data to any additional states or state or 
federal agency unless authorized by statute, or (3) Collecting, obtaining, or retaining 
any data in connection with activities related to compliance with the act.) 

9. Montana - Mont. CODE ANN. § 61.5.1 (2007) (The state of Montana will not 
participate in the implementation of the REAL ID Act of 2005. The department, 
including the motor vehicle division of the department, is directed not to implement 
the provisions of the REAL ID Act of 2005 and to report to the governor any attempt 
by agencies or agents of the U.S. department of homeland security to secure the 
implementation of the REAL ID Act of 2005 through the operations of that division 
and department.) 

10. New Hampshire - ([T]he state of New Hampshire shall not participate in any 
driver’ s license program pursuant to the Real ID Act of 2005 or in any national 
identification card system that may follow therefrom. ... The department of safety 
shall not amend procedures for applying for a driver’s license under RSA 263 or an 
identification card under RSA 260:21 in order to comply with the goals or standards 
set forth in the Real ID Act of 2005, or in any rules or regulations promulgated 
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thereunder, or in any requirements adopted by the American Association of Motor 
Vehicle Administrators for such purposes. . . . The department of safety shall not 
expand the motor vehicle records data it shares with other states, the federal 
government, or other agencies, or provide motor vehicle records data to any additional 
states or state or federal agencies unless authorized by statute.) 

1 1 . Oklahoma — OKI. A. Stat. Ann, tit. 47, § 6-1 10.3 (2007) (The State of Oklahoma 
shall not participate in the implementation of the REAL ID Act of 2005. The 
Department of Public Safety is hereby directed not to implement the provisions of the 
REAL ID Act of 2005 and to report to the Governor and the Legislature any attempt 
by agencies or agents of the United States Department of Homeland Security to secure 
the implementation of the REAL ID Act of 2005 through the operations of that or any 
other state department. ... No department or agency of the state charged with motor 
vehicle registration or operation, the issuance or renewal of driver licenses, or the 
issuance or renewal of any identification cards shall collect, obtain, or retain any data 
in connection with activities related to complying with the REAL ID Act of 2005.) 

12. Oregon - 2009 Or. Laws Chapt 432 (A state agency or program may not expend 
funds to implement the Real ID Act of 2005, P.L. 109-13, unless: (1) Federal funds are 
received by this state and allocated in amounts sufficient to cover the estimated costs 
to this state of implementing the Real ID Act of 2005, and . . . Sufficient measures to 
protect the privacy of individuals, and . . . Sufficient safeguards against unauthorized 
disclosure or use of an individual's personal identifying information by department 
personnel or any contractor, agency or other person who may have access to the 
database, records facility or computer system.) 

13. South Carolina - S.C, Code Ann. § 56.1.85 (The State shall not participate in the 
implementation of the federal REAL ID Act.) 

14. Virginia - Va Code Ann. § 2.2-6 i4.2 (2005) (Provides that, with the exception of 
identification cards issued to employees of the Department of State Police and certain 
other law enforcement officers, the Commonwealth will not comply with any 
provision of the federal REAL ID Act that it determines would compromise the 
economic privacy, biometric data, or biometric samples of any resident of the 
Commonwealth) 

15. Washington Wash. Rev. Code §43.41.390 (A state agency or program may not 
expend funds to implement or comply with the REAL ID Act of 2005, P.L. 109-13, 
unless . . . federal funds are received by the state of Washington ... in amounts 
sufficient to cover the costs of the state implementing or complying with the REAL ID 
Act of 2005.. . the department of licensing shall certify that the driver's license, 
identicard, database, records facility, computer system, and the department's personnel 
screening and training procedures: (1) Include all reasonable security measures to 
protect the privacy of Washington state residents; (2) include all reasonable safeguards 
to protect against unauthorized disclosure of data; and (3) do not place unreasonable 
costs or recordkeeping burdens.) 
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As mandated by these fifteen statutes, these states will never comply with Real ID. It would 
be illegal for state officials to do so and has thereby created an impossible situation for DHS. 

The only penalty for failure to comply with Real ID is that the citizens of non- 
compliant states cannot use their drivers’ licenses to board airplanes or enter federal facilities. 
If DHS were to implement Real ID, it would mean denying the 64.7 million citizens of these 
15 states, more than 20% of the total U.S. population, the right to use their drivers’ license 
when boarding an airplane."* Because a state driver’s license is the main identification for 
most Americans this is functionally impossible. DHS would either have to ignore the aviation 
identification requirement altogether or send millions of people to secondary screening or 
employ other, much slower, mechanisms for verifying identity. The first alternative has 
already been rejected by DHS on security grounds. The other two would bring air travel to a 
halt and cause numerous security problems at other federal facilities. 

The only viable alternative is the one DHS has chosen: to postpone implementation 
repeatedly. According to the original language of the Real ID Act, its provisions were to be 
implemented within three years, by May 2008. In January 2008, DHS postponed that 
deadline, creating two new compliance deadlines. States were required to be compliant with 
one part of the act by December 31, 2009 and be fully compliant by May 1 1, 2011.^ Those 
deadlines again proved impossible and further extensions were granted in December 2009 and 
January 2011.*’ The current nominal compliance deadline has been extended to January 2013.^ 

Given such facts regarding Real ID implementation and the current impasse between 
the federal government and the states, any further regulatory efforts by DHS are futile. It is 
incumbent upon Congress and DHS to recognize that any further actions around a statute that 
will never be implemented is wasteful and unnecessary. DHS should halt any further Real ID 
rulemaking and Congress should repeal the underlying Real ID statute. 


■^U.S. Census Bureau, (2010, December 2\) Resident Population Data (retrieved October 28, 2011), 
" 73 Fed. Reg, 5272, 

"^74 Fed. Reg. 68477. 

■76 Fed. Reg, 12269, 
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The Honorable Bobby Scott, Ranking Member 
Subcommittee on Crime, Terrorism, and Homeland Security 
Committee on the Judiciary 
U.S. House of Representatives 

Dear Chairman Sensenbrenner and Ranking Member Scott: 

The National Association for Public Health Statistics and Information Systems 
(NAPHSIS) thanks you for scheduling the subcommittee's important and timely 
hearing, “Secure Identification: The REAL ID Act's Minimum Standards for 
Driver's Licenses and Identification Cards," and we were pleased to submit a 
statement for the record on the role of vital records and the Electronic 
Verification of Vital Events (EWE) system used to safely and securely verify the 
authenticity of birth certificates. 

During the hearing, witnesses were unable to answer your specific questions 
about birth certificates— how does one obtain a birth certificate, and what do 
they need to present to obtain it? NAPHSIS would like to take this opportunity to 
respond to your questions on the record as the organization that represents the 
57 vital records jurisdictions that collect, process, and issue birth and death 
records in the United States. 


Vital records are permanent legal records of life events, including live births, 
deaths, fetal deaths, marriages, and divorces. Data providers— for example, 
hospitals for birth information and funeral homes, physicians, and coroners for 
death information— submit birth and death data to the vital records jurisdictions 
so that the vital event can be reviewed, edited, processed and officially 
registered. The jurisdictions are then responsible for maintaining registries of 
such vital events and for issuing certified copies of birth and death records. 

The 57 vital records jurisdictions, not the federal government, have legal 
authority for the registration of these records, which are thus governed under 
state laws. The laws governing what information may be shared, with whom, 
and under what circumstances varies by jurisdiction. In most jurisdictions, access 
to records is restricted to family members for personal or property rights, to 
government agencies in pursuit of their official duties, or for research purposes. 
In other jurisdictions, release of vital records information may be subject to less 
restrictive limitations; and in a few states identifiable information from birth and 
death certificates is publicly available. 
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To obtain a copy of a birth certificate, an individual must complete an 
application and submit it to their state of birth by mail, or in-person at 
designated walk up counters. Some states now accept applications online. In 
most cases, an individual wishing to purchase a copy of a birth certificate must 
also present a driver's license with the application, or if not applying in person, a 
copy of it. 

True identification of an individual seeking a birth certificate is difficult, and a 
careful vetting requires significant time and highly trained staff. At present, most 
vital records jurisdictions do not have the resources and the needed 
technological solutions to verify the identity of purchasers, track "repeat 
customers," and investigate suspicious activity. In the majority of states, most 
vital records are purchased by mail. Unlike obtaining a driver's license, where 
the driver is always present in the state, many people live far from the site 
where the records are kept and certified copies are issued, often in a different 
state or country. Such transactions make purchaser identification even more 
difficult, as copies of proxy identification documents are easy to fake, and 
comparisons of an individual with a picture are not possible. The true intent of 
the purchaser is virtually impossible to determine. 

As mentioned in our written statement for the record submitted March 21, 2012 
in conjunction with the hearing, the Department of Homeland Security is in the 
earliest stages of supporting a new project to close some of these loopholes that 
contribute to identity fraud. In this "reciprocal pilot," three departments of 
motor vehicles (DMV) will use the EWE system to verify birth certificates, and 
three vital records jurisdictions will use the DMVs' driver's license verification 
system to verify driver's licenses that individuals present to obtain copies of 
birth certificates. The development of the interface should take about one year 
and once installed, the pilot will last 14 months. Duringthe pilot, the DMVs and 
vital records jurisdictions will jointly investigate instances of "no matches," 
determining why a no match occurs and developing business practices to handle 
no matches. 

NAPHSIS's White Paper on Recommendations for Improvements in Birth 
Certificates includes a comprehensive set of remedies for these and other birth 
certificate vulnerabilities consistent with the 2004 Intelligence Reform and 
Terrorism Prevention Act. These recommendations reflect our professional 
judgments on the amount of security and fraud risk that will be alleviated, the 
ease of implementation, the resources required, and the need for coordination 
with other entities outside the vital records community. In summary, NAPHSIS 
recommends that long-delayed regulations— expected September 2012 from 
the Department of Health and Human Services— on birth certificate issuance 
standards include provisions to strengthen birth certificate security, printing, 
use, and release requirements. More broadly, NAPHSIS recommends support for 
the modernization of the vital records infrastructure to produce more accurate, 
timely, and secure vital records. Specifically, HHS' investment in electronic birth 
and death registration systems will secure these records as intended by the 
Intelligence Reform and Terrorism Prevention Act, and will benefit HHS as it 
performs its key functions. 
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The Honorable James Sensenbrenner 
Chairman 

Subcommittee on Crime, Terrohsm, and 
Homeland Security 
House Judiciary Committee 
B-370B Rayburn House Office Building 
Washington, DC 20515 


The Honorable Louie Gohmert 
Ranking Member 

Subcommittee on Crime, Terrorism, and 
Homeland Security 
House Judiciary Committee 
B-370B Rayburn House Office Building 
Washington, DC 20515 


Dear Chairman Sensenbrenner and Ranking Member Gohmert, 


I write in strong opposition to the REAL ID Act 


In 2005, 1 signed a law forbidding Montana from complying with REAL ID (MCA 61-5-128) This (aw 
stated that Montana found the REAL ID to be “inimical to the security and well-being of the people of 
Montana, will cause unneeded expense and inconvenience to those people, and was adopted by the 
U.S congressin violation of the principles of federalism contained in the 10th amendment to the US 
constitution '' 


Montana objects to the implementation of REAL ID for a number of reasons, the most important of 
those being its threat to our pnvacy rights which are enshrined in our 1972 Constitution The so- 
called national identity verificabon hub. and the arbitrary demand that Montanans show a REAL ID 
compliant docRimenr before boarding a commercial flight or entering a federal building, are direct 
threats to Montanans individual rights and privacy 

Montana will not agree to share its abzens' personal and private informabon through a national 
database, nor bear the exorbitant cost building such a database Furthermore, the Act tramples on 
our state's nght to determine our own licensing procedures and protocols, and would interfere with our 
state's work to improve drivers’ license security. 

Montana is in no mood at all for arwther heavy-handed play by the federal government, such as what 
transpired in 2008 when the homeland secun^ director threatened to prevent Montanans from 
boarding an airplane unless we complied with the REAL ID act We refused, and will refuse again 

While folks In Washington may have believed they knew what was best for Montana when they 
created the REAL ID Act, In fact Montanan's have little use for this unpopular, unfunded, and 
completely unfeasible mandate The House Judiciary Committee Subcommittee on Crime. Temorism, 
and Homeland Security should use today's hearing to begin the process of repealing the REAL ID 
Act 


Sincerely, 

BRIAN SCHWEITZER 
Governor 


.“Si Ml r wtiiH • P O. Bov Jixiwil • lliMM, Muni iN \ S'rfr2iiii)litl 
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The Honorable F. James Sensenbrermer, Jr. 
Chaiiinan 

Subcommittee on Crime, Terrorism and 
Homeland Security 
Committee on the Judiciary 
U.S. House of Representatives 
Washington, D.C. 20515 

Dear Mr. Chairman and Representative Scott, 


The Honorable Robert C. Scott 
Ranking Member 

Subcommittee on Crime, Terrorism and 
Homeland Security 
Committee on the Judiciary 
U.S. House of Representatives 
Washington, D.C. 20515 


I am writing on behalf of the members of the Fraternal Order of Police to provide you witli our 
views on the REAL ID Act, which is the subject of an oversight hearing entitled, “Secure 
Identification: The REAL ID Act’s Minimmn Standards for Driver’s Licenses and Identification 
Cards.” 


The Fraternal Order of Police has supported tbe REAL ID Act since it was initially proposed in 
2005 because, for our members, it is a critical officer safety issue. Whether it’s a routine police 
matter or a life tlireatening situation like an auto collision, law enforcement officers rely on identity 
documents to establish the identity of the persons involved. In nine out of ten instances, that identity 
document is a driver’s license. Driver’s licenses also allow officers to access information related to 
a person’s driving record, and more importantly, any criminal history. In states that now comply 
with REAL ED rules, hundreds of criminals are being uncovered as imposters by police officers 
working with the driver’s license agencies. Some of those imposters are identity thieves, and others 
are wanted criminals witli violent histories. 

The new rules implement Federal law by setting specific requirements for States to help combat 
identity fraud. New licenses can only be issued after an individual’s identity and proof of 
citizenship or legal status have been established and all new licenses must incorporate information 
and secui'ity features. For example, the States of Ohio, Florida, and Delaware, all of which are 
compliant with REAL ID, have brouglit charges against hundreds of imposters for fraud and identity 
theft. Finding these imposters also makes the road safer. Last year, fifty four percent of identity theft 
suspects arrested hy the Ohio State Highway Patrol were also charged with having a suspended 
license. Fifteen percent of suspects were charged with operating a vehicle under the influence 
impaired. 

This data demonstrates what the FOP maintained during the debate to cnaet this legislation- 
improving the security of identity docirments like driver’s licenses can help us get criminals off the 
street. In States like Maryland, where driver’s license security is being raised to meet REAL ID 


— BUILDING ON /t PROUD TRADITION — 
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standards, there have been numerous arrests for identity fraud uncovered by investigators. Driver’s 
license agencies can play a significant role in assisting law enforcement officers as they investigate 
identity crimes or organized criminals using falsified identity documents to fraudulently obtain 
other identity documents. 

Complying with REAL ID standards also make it much more difficult fo criminals to obtain and 
exploit counterfeit driver’s licenses. In paificular, the “invisible” security features known only to 
law enforcement are incredibly important to combat high quality counterfeits which are finding their 
way into the United States in larger numbers. At the end of the day, the security of our nation’s 
driver’s licenses is only as strong as its weakest link. Organized criminals will target and exploit 
systems which allow them greater and easier access to fi-audulent or illegally obtained documents. 

Cost was one of the genuine concerns raised about the implementation of the REAL ID Act. 

Happily, we are given to understand that the actual cost for implementation is much lower than the 
estimates made by groups like the National Governors’ Association, the National Council of State 
Legislatures, the Ameiican Association of Motor Vehicle Associations and even those of the U.S. 
Department ofHomeland Security. 

The Fraternal Order of Police strongly believes public safety on our nation’s highways and 
neighborhoods will be better served if the Federal government continues to support implementation 
of the REAL ID Act and assists all States in reaching compliance. 

On behalf of the 330,000 members of the Fraternal Order of Police, thank you for holding this 
hearing on this important issue and for considering our views. The rank-and-file law enforcement 
officers who put tliemselves in harm’s way everyday must have confidence in the identity 
documents they receive while doing their jobs and we believe REAL ID implementation will 
provide that confidence. If I can be of any additional assistance, please do not hesitate to contact me 
or Executive Director Jim Pasco at my Washington office. 


Sincerely, ^ ^ I 

Chuck Canterbury f / 

National President 
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On May 1 1 , 2005, Congress passed the REA1 , ID Act as part of the Emergency Supplemental 
Appropriations Act for Defense, the Global War on Terror, and t sunami Relief Act (P.1,. 109- 
13), creating national standards for the issuance of state driver’s licenses and identification cards. 
While state legislators across the country' share the goal of ensuring the security and integrity of 
state-issued driver’s licenses and identificalion cards, the road to successful implementation of 
REAL ID has been impeded by a number of implementation obstacles, which remain unresolved. 
This includes: 

• the federal government’s failure to fully fund the REAL ID requirements; 

• uncertainty regarding the availability of, connectivity to and governance structure for use 
of a number of databases that states will need to access in order to electronically verify 
the validity of identity documents: 

■ the uncertainty regarding privacy protections : and 

• the Department of Homeland Security’s (DHS) failure to recognize the critical role of 
state leuislalures in implementation of the REAL ID. 

Failure to Fund 

Congress has provided less than S225 million to states for REAL ID implementation — a $3.9 
billion mandate, according to the DIlS cost estimate. Slates have collectively closed $480 billion 
in budget gaps helw'ccn fiscal years 2009-2012 and also face further significant reductions in 
federal funds as a result of the Budget Control Act. States do not have extra funds to pay for 
federal mandates and to make implemenlalion ofR.KAL ID an allowable expense under other 
homeland security programs is not a solution. States must also not be required to pay to access 
the databascs.'systems necessary to verify- the validity of certain idenlification documents. {See 
Databases/Privacy Protections.) Congress needs to fully fund the requirements or provide 
slates relief from implementation through the use of w-aivers, extensions, and changes to the law 
or final regulations. 

Dalabases/Privacv Protections 

The RE.AI, ID Act and its implementing regulations require stales to verify the validity of 
identification documents presented by individuals applying for a RE.M, ID compliant credential 
with the issuer of the document. When fully implemented, this process will require slates to 
have access to at least five national databases. While some of these databases exist, the 
availability and reliability of a number of these databases has yet to be tested on a national level. 
In addition, for several of these databases, the method by which states will connect to these 
systems and the governance structure for information sharing has yet to be resolved. T he 
uncertainty regarding these systems makes it difficult for state legislators to respond to questions 
they receive from their constituents regarding privacy: “Who will have access to my 
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information?’' “Ilow will it be protected?” “Is this a national database?” These issues Jteed to 
be resolved, with input from state legislators, before states are required to implement the 
requirements. 

State Legislatures’ Role 

fhe lack of understanding by DHS, the current and previous administration, (d'the critical role of 
the state legislature in the implementation of REAL ID — appropriating funds, oversight, 
evaluation, information gathering activities — has been a barrier. The National Conference of 
State Legi.slatures encourages the department to engage in additional outreach to state legislatures 
as the full implementation deadline approaches. 

NCSL Policy 

In re.sponse to the implementation obstacles discussed, the following policy was adopted 
unanimously at NCSL’ s 2011 Legislative Summit. 

NCSL urges Congress and the administration to continue to work with NCSL and its 
members on alternatives to the REAL ID. NCSL supports efforts to extend existing 
deadlines until obstacles to implementation are addressed. In addition, NCSL supports 
the use of waivers by the Secretary of the Department of Homeland Security, for stales 
that have adopted other forms of compatible identification. 

NCSL urges Congress and the administration to work with NCSL and Us members to 
adjust Title II of the REAL ID Act and develop solutions in conjunction with NCSL that 
recognize national security hut do not impede the sovereignty of state licenses or place a 
federal agency or agent as a permanent and ongoing authority for determining state 
license uses and requirements. 

The Need for Change 

NCSL supported congressional efforts in 2009 (PASS ID — Providing for Additional Security in 
Slates ' Identification Act of 2009) to make changes to the REAL ID and would welcome 
legislative or regulator)’ efforts by the 1 12'^ Congress or the administration, respectively, to 
address the acts implementation obstacles. NCSL urges Congress and the department to engage 
stale legislators in this process. 

With less than 1 0 months until the REy\L ID full compliance deadline, state legislators remain 
committed to working with federal policymakers on this issue. Slate legislators share your 
common goal, to ensure the safety and security of our nation. 


Attachment: State Legislative Activity in Opposition to the Real ID 



96 


March 21, 2012 
p.4 


State Legislative Activitj' in Opposition to the Real ID 


Stiiliitor>' Oppoisition to 

C omply with the Real ID 

Approved Concurrent or .loint 
Resolutions in Opposition to the Real 

ID' 



Alaska - 2008 SB 202 

Arkansas - 2007 SCR 16. SCR 22 

Arizona - 2008 IIB 2677; 2009 1 IB 2426 

Colorado - 2007 H.TR 1047 

Geortiia*' - 2007 SB 5 

Hawaii -2007 SCR 31 

Idaho - 2008 HB 606 

Illinois - 2007 H.IR 27 

Louisiana - 2008 HB 7 1 5 

Nebraska - 2007 LR 28 

Maine - 2007 LD 1138 

Nevada -2007 A.IR6 

Minnesota - 2009 IIB 988 

North Dakota - 2007 SCR 4040 

Missoui-r- 2009 1 IB 361 

South Dakota - 2008 SCR 7 

Montana - 2007 HB 287 


New Hampshire - 2007 HB 685 

Approved House or Senate Resolutions !(| 
in Opposition to the RE.AL ID 

Oklahoma - 2007 SB 464 

Michigan - 2007 HR 176 

Oregon'* 2009 SB 536 

I’enn.svivania - 2008 HR 767, SR 1 26 

South Carolina - 2009 SB 449 


Utah-2010HB234 


Virginia" - 2009 HB 1587. SB 1431 


Washington'’ - 2007 SB 5087 



‘ Does not include states that have adopted both statutes and resolutions in opposition to the Real ID. Those states 
are only listed as stales adopting statutes in opposition to the REAL ID. 

‘ Allows the Governor to delay Real ID compliance until the U.S. Department oT Homeland Security guarantees that 
defined safeguards will protect die economic and biological privacy ofthe citizens ol'Georgia. 

^ Prohibits the Depaitinent of Revenue from amending procedures for applying for a driver's license or idenlif cation 
card in order to comply with the goals or standards ofthe federal Real ID Act ol 2005, any rules or regulatitins 
promulgated under the authurily granted in such act, or any requirements adopted by the American Association ot 
Motor Veliiclc Administrators for furtherance ofthe act. Contains other pix)Yi.sions regarding driver's licenses and 
identilication cards 

Became law without the Governor's signature. Prohibits any stale agency from expending any funds to implement 
the Real ID Act unless the state DO'f implements sufficient measures to protect individuals privacy, and puts 
safeguards in place that protect against the unauthorized disclosure or use of an individual's personal identifying 
inlbiTnation. The DOT cannot participate in the Real ID Act if it; requires the department to piirlicipate in any 
multislate or federal shared database program unless the department is able to provide sufticicnt security measures to 
protect the privacy of individuals; charges unreasonable fees; or place unreasonable record keeping burdens on an 
applicant for issuance, renewal or replacement of a driver license, driver permit or identification card. Requires the 
state DOT to prepare a report that anaiy/es the cost of the Real ID Act to the state, which has to be available to the 
slate. 

' Prohibits implementation to comply with any provision of the Real ID Act and with any other federal law, 
regulation, or policy that would compromise the economic privacy, biometric data or biometric samples of any 
resident of the Commonwealth. 

Prohibits impiemeniaiion unless changes arc made regarding privacy and funding. 
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About NCSL 

The National Conference of State Legislatures (NCSL) is the bipartisan organization that serves 
the legislators and staffs of the states, commonwealths and territories. NCSL provides research, 
technical assistance and opportunities for policymakers to exchange ideas on the most pressing 
state issues and is an effective and respected advocate for the interests of the states in the 
/\merican federal system, 

NCSI . has three objectives: 

• To ensure state legislatures a strong, cohesive voice in the federal system. 

• To improve the quality and effectiveness of state legislatures. 

• To promote policy innovation and communication among state legislatures. 

The Conference operates from offices in Denver, Colorado, and Washington, D.C. 


Contact; 

Molly Ramsdell, Director, Washington Office 
National Conference of State Legislatures 
444 North Capitol Street, NW, Suite 515 
Washington, D.C, 20001 
Phone: 202-624-5400 
Email: mollv.ramsdell@ncsl.org 
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Chairman Sensenbrenner, Ranking Member Gohmert, distinguished members of the 
committee; my name is Paul Opsommer, Chair of the Michigan House Transportation 
Committee. During the past 5 years I have been heavily involved in REAL ID, passing state 
level resolutions and bills within Michigan, as well as drafting adopted related policy with the 
National Conference of State Legislators. I appreciate the opportunity to present to you my 
personal written testimony regarding state implementation of Title II of the REAL ID Act. 


OVERVIEW: 

Michigan is one of many states that has not passed legislation to comply with the REAL ID Act, 
and our laws contain statutory language that nothing in its driver's license code authorizes 
compliance with Title 11 of REAL ID. While some of the intent and requirements of Title il are 
well intended, it is my opinion that there are better ways to obtain the core objectives of the 
most basic best practices called for under the first round of final rules. Please note that while 
Michigan is in some cases technically compliant with some aspects of REAL ID, these have been 
accomplished on our own initiative, independent of REAL ID, and should not be construed as a 
willingness or desire to continually have our driver's license standards set by the federal 
government. Indeed, our experience with another DHS program, known as Enhanced Driver's 
Licenses (EDLs), has proven that many of the concerns about giving ongoing power to federal 
bureaucratic processes are not hypothetical and are indeed a real danger and concern to the 
states and its citizens. While I sincerely appreciate the work of the many people who, like me, 
seek the best public policy that balances the safety of our citizens with the tenets of freedom, 
federalism, and state powers, I believe that Title II of REAL ID needs to be repealed and 
replaced. 

BACKGROUND: 

As you are no doubt aware, when the REAL ID Act was passed it replaced a negotiated 
rulemaking process that was already taking place with the states in this area. This was 
controversial for several reasons, primarily because early versions of the REAL ID law would 
have required states to join the AAMVA compact known as the Driver's License Agreement 
(DLA]. Such a requirement would have not only put an International 501c3 with foreign voting 
members in charge of driver's license provisions in regards to technology and biometrics, it 
would have also mandated international data sharing. While this provision is not in the current 
set of rules, because DHS control under REAL ID is permanent and ongoing there is little solace 
to the states in this area knowing the direction some would like to take future rulemaking. 
Likewise, although advanced biometric collection and RFID were not called for in the current 
rulemaking process, the current rules expressly state that DHS can change these requirements 
at any time and would not need to go back to Congress in order to do so. 




100 


As an example: 

Page 86, "Moreover, in the future, DHS, in consultation with the States and DOT, may 
consider technology alternatives to the PDF417 2D bar code that provide greater 
privacy protections after providing for public comment" 

The "final rules" are therefore not really final, and it is unacceptable that such technological 
decisions could be made by requiring only non-binding consultation with States, especially 
when there is debate between the States and the federal government as to what really 
constitutes optimal privacy and security options for their driver's licenses. 

Contrary to other reports or testimony you may receive, after talking to my colleagues both 
here in Michigan and across the country 1 strenuously assert that the states do not see 
tremendous value in keeping Title II of REAL ID In Its current form that abrogates all state 
powers. Michigan, on its own accord and through Its own Initiatives, has denied drivers 
licenses to illegal Immigrants. We have other strong security measures In place that we fully 
support and are proud of. These are state policy positions we are pursuing on our own, 
irrespective of REAL ID. Any reports that show states like Michigan as somehow being 
supportive of the REAL ID law itself because it has made similar decisions only shows the 
initiative the states have in this area. In fact, many of these same states ironically have laws on 
the books expressly prohibiting them from complying with REAL ID. 

In fact, no state could currently reach all REAL ID benchmarks today even if they wanted to, 
because some database requirements have not been finalized. Even for those states that are 
currently receiving a gold star for "technical compliance", not all benchmarks are being met. In 
the future, DHS may very well ask them to remove the gold stars from their licenses, a 
bureaucratic nightmare in of itself. What will constitute earning a gold star will continue to be a 
moving target, and once states start to issue these there will be tremendous pressure to go 
along with all future requirements considering the cost to reissue new noncompliant licenses. 
Because this is not taking place as a finite rulemaking process with the states, I do view this as a 
federal takeover and as an outsourcing of a defacto national ID card onto the states. In my 
opinion, while each license will continue to have a unique state look and design, it will be a 
national ID card that would come In over 50 assorted flavors with nothing more than a 
prominent state designation data field. There does not need to be a federal database to have a 
national ID card. 

As final background, I would like to share my experience of the past several years dealing with 
the Department of Homeland Security regarding what are known as Enhanced Driver's Licenses 
{EDLs}. While Michigan has entered into this program, one that was Initially presented to us as 
a non-cookiecutter partnership with the federal government, we currently have significant 
buyer's remorse. As an example, DHS Is mandating the we issue EDLs that include unencrypted, 
long range (20-30 feet) RFID chips in our EDLs despite the fact they acknowledge this was not a 
requirement of Congress. While a debate on the ramifications of such technology and 
unmanned automated checkpoints Is not appropriate here, it shows how quickly bureaucratic 
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ruleS; both official and unofficial, creep into seemingly innocuous programs. Michigan's 
Secretary of State has presented to DHS a new EDL agreement that wouid aliow for the 
continuance of an EDL program in every secure manner, that verifies and denotes citizenship, 
but does not contain a wireless chip. This is what Congress Intended. Such attempts have been 
repeatedly and firmly denied however, and I would advise other states not to adopt EDLs until 
this Is resolved. 

I also unfortunately believe this to be indicative of how DHS will treat the states in a similar 
manner under both current and future REAL ID rules and rulemaking processes. These will be 
decisions on collecting advanced biometrics / use of facial recognition, use of wireless 
technology, the sharing of data with foreign governments, and additional potential federal uses 
such as medical care or firearm purchases. 

SOLUTIONS AND CONCLUSIONS: 

Title II of the REAL ID Act as currently written is unworkable and needs to be repealed and 
replaced. Most states have already adopted what I consider to be the "low hanging" security 
standards we should implement. A negotiated and finite rulemaking process with the states 
would not undo any of the good work that has already been done, and would allow the states 
to go forward with federal partnerships knowing they are not being forced to give a virtual 
blank check to the federal government or its agents. 

1 also believe that beyond these basic minimum standards that Congress should keep state and 
federal documents separate. Indeed, the federal government would be well served by focusing 
on its own federal passport standards, some of which I believe are weaker than what they are 
requiring of the states. An emphasis should also be made to keep full-fledged federal passport 
costs down, a goal that numerous GAO reports have shown to be routinely ignored. "Passport- 
lite" cards are not the answer. Fully functional federal passports at under $50 should be a goal 
of Congress if it wishes to pursue laws such as the Western Hemisphere Travel Initiative. The 
use of behavioral economics to create demand for REAL ID and EDLs creates friction with the 
states, which should be viewed as equal sovereign partners. 

Continued games of bluff and public relations campaigns between the federal government and 
the states over REAL ID deadlines are counterproductive and have become distractions 
hindering government from reaching real solutions for the people we seek to serve. While the 
REAL ID debate has become sometimes contentious, 1 again do thank all stakeholders for their 
hard work and dedication as we seek public policy that balances the safety of our citizens with 
the tenets of freedom, federalism, and state powers. 
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